RFC 4544
Definitions of Managed Objects for Internet Small Computer System Interface (iSCSI)
RFC 4544: Definitions of Managed Objects for Internet Small Computer System Interface (iSCSI) 💖
Network Working Group 🌸 Published by the IETF's Network Working Group, so this is a group effort, not one person's vibe.
- Authors: M. Bakke (Cisco Systems), M. Krueger (Hewlett-Packard), T. McSweeney (IBM), and J. Muchow (Qlogic Corp.) 👑
- Category: Standards Track ✨
- Date: May 2006 🦋
- Obsoletes / Updates: the header doesn't list any RFCs that this one obsoletes or updates 🙈
1. Introduction ✨
okay so this doc defines a MIB module for iSCSI [RFC3720]. MIB stands for Management Information Base, and it's basically the menu a network manager uses to look at and poke at devices that speak iSCSI 🧚
2. Specification of Requirements 💅
This part is the official key word rulebook. The words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be read as described in RFC 2119 [RFC2119]. So when you see those capital words, they mean exactly what RFC 2119 says, periodt 🔥
3. The Internet-Standard Management Framework 🌈
If you want the full tour of the current Internet-Standard Management Framework, check out section 7 of RFC 3410 [RFC3410]. It's giving big-picture overview 🫶
Managed objects are accessed through a virtual information store called the Management Information Base, or MIB. Usually you reach MIB objects with the Simple Network Management Protocol (SNMP). The objects get defined using the mechanisms in the Structure of Management Information (SMI). This memo specifies a MIB module that is compliant to the SMIv2, which is described in STD 58, RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 [RFC2580] 📚
4. Relationship to Other MIB Modules ⭐
The iSCSI MIB module is normally layered between the SCSI MIB module [RFC4455] and the TCP MIB module [RFC4022]. It also makes use of the IP Storage (IPS) Identity Authentication MIB module [RFC4545]. Here's how all these modules are connected 🎀
- SCSI MIB: 💜 When a SCSI layer is present in a system, each
iscsiNodeis related to one SCSI device in the SCSI MIB module, whether it's got an initiator role, a target role, or both. TheiscsiNodeTransportTypeattribute points at the SCSI transport object in the SCSI MIB module, and that object has an attribute that points right back to theiscsiNode. So a management station can hop between the two MIB modules, which is so useful 😭 If a SCSI layer is not present, like in an iSCSI proxy device, theniscsiNodeTransportTypeeither points to the appropriate corresponding object in the appropriate MIB, or it's left blank. - TCP MIB: 🦋 Each iSCSI connection is related to one transport-level connection. Right now iSCSI only uses TCP, so the iSCSI connection is related to a TCP connection by its normal (protocol, source address, source port, destination address, destination port) 5-tuple.
- AUTH MIB: 🌸 Each iSCSI node that serves a target role can have a list of authorized initiators. Each entry in that list points to an identity in the IPS Identity Authentication MIB module that's allowed to access the target. iSCSI nodes that serve an initiator role can also have a list of authorized targets. Each entry points to an identity in the Auth MIB module that the initiator should try to start sessions with. The Auth MIB module holds info used to identify initiators and targets by their iSCSI name, IP address, and/or credentials 🔐
This MIB module imports objects from RFCs 2578 [RFC2578], 2579 [RFC2579], 2580 [RFC2580], and 3411 [RFC3411]. It also imports textual conventions from the INET-ADDRESS-MIB [RFC4001] 🍓
5. Relationship to SNMP Contexts 🧚
Every non-scalar object in the iSCSI MIB module is indexed first by an iSCSI Instance. An instance is a collection of nodes, portals, sessions, and so on, and it can define a physical or virtual partition of an iSCSI-capable device. Instances work really well with partitionable or hierarchical storage devices, and they fit in neatly with other management schemes 💅
Instances don't replace SNMP contexts. They do, however, give you a super simple way to assign a virtual or physical partition of a device to one or more SNMP contexts, without having to do it for each individual node, portal, and session row 🫶
6. Discussion 🌈
This MIB module structure gives you configuration, fault, and statistics info for iSCSI devices [RFC3720]. It's organized around the well-known iSCSI objects, like targets, initiators, sessions, connections, and so on ✨
You can also use this MIB module to configure access to iSCSI targets, by creating iSCSI Portals and authorization list entries 🎀
It's worth noting that this is an iSCSI MIB module, so it only reflects iSCSI objects. It doesn't contain information about the SCSI-layer attributes of a device. If a SCSI layer is present, the SCSI MIB module, which is currently under development, may be used to manage SCSI information for a device 🙈
The iSCSI MIB module is made up of several "objects", each represented by one or more tables. This section gives a brief description of the "object" hierarchy and of each object, then talks about the actual table structure inside the objects 🦋
6.1. iSCSI MIB Object Model 👑
The top-level object here is the iSCSI instance, which "contains" all the other objects 💜
iscsiInstance
-- A distinct iSCSI entity within the managed system.
iscsiPortal
-- An IP address used by this instance
iscsiTargetPortal
-- Contains portal information relevant when the portal
-- is used to listen for connections to its targets.
iscsiInitiatorPortal
-- Contains portal information relevant when the portal
-- is used to initiate connections to other targets.
iscsiNode
-- An iSCSI node can act as an initiator, a target, or both.
-- Contains generic (non-role-specific) information.
iscsiTarget
-- Target-specific iSCSI node information.
iscsiTgtAuth
-- A list of initiator identities that are allowed
-- access to this target.
iscsiInitiator
-- Initiator-specific iSCSI node information.
iscsiIntrAuth
-- A list of target identities to which this initiator
-- is configured to establish sessions.
iscsiSession
-- An active iSCSI session between an initiator and target.
-- The session's direction may be Inbound (outside
-- initiator to our target) or Outbound (our initiator to
-- an outside target).
iscsiConnection
-- An active TCP connection within an iSCSI session.An iSCSI node can be an initiator, a target, or both. Its portals can be used to start connections (if it's an initiator) or to listen for them (if it's a target), depending on which role the node is playing 🔥 The iSCSI MIB module assumes that any target may be accessed via any portal that can take on a target role, although other access controls that aren't reflected in the module might limit this 🌸
6.2. iSCSI MIB Table Structure ✨
okay so every iSCSI object exports one or more tables 📋 there's an attributes table, plus zero or more statistics tables that augment it. iSCSI is still an evolving standard, so it's way cleaner to keep statistics and attributes in separate tables. That way, you can add attributes and statistics independently, no drama 💅 In a few cases there are multiple categories of statistics that will probably keep growing, so in those cases an object contains multiple statistics tables 🌈
iscsiObjects
iscsiDescriptors
iscsiInstance
iscsiInstanceAttributesTable
iscsiInstanceSsnErrorStatsTable
-- Counts abnormal session terminations
iscsiPortal
iscsiPortalAttributesTable
iscsiTargetPortal
iscsiTgtPortalAttributesTable
iscsiInitiatorPortal
iscsiIntrPortalAttributesTable
iscsiNode
iscsiNodeAttributesTable
iscsiTarget
iscsiTargetAttributesTable
iscsiTargetLoginStatsTable
-- Counts successful and unsuccessful logins
iscsiTargetLogoutStatsTable
-- Counts normal and abnormal logouts
iscsiTgtAuthorization
iscsiTgtAuthAttributesTable
iscsiInitiator
iscsiInitiatorAttributesTable
iscsiInitiatorLoginStatsTable
-- Counts successful and unsuccessful logins
iscsiInitiatorLogoutStatsTable
-- Counts normal and abnormal logouts
iscsiIntrAuthorization
iscsiIntrAuthAttributesTable
iscsiSession
iscsiSessionAttributesTable
iscsiSessionStatsTable
-- Performance-related counts (requests, responses, bytes)
iscsiSessionCxnErrorStatsTable
-- Counts digest errors, connection errors, etc.
iscsiConnection
iscsiConnectionAttributesTableQuick heads-up, bestie: this module doesn't try to count everything 🙈 it only includes the counters that are actually useful for spotting performance, security, and fault problems from a management station. Focus, not chaos 🎯
6.3. iscsiInstance 🧚
The iscsiInstanceAttributesTable is the primary table of the iSCSI MIB module 👑 every table entry in this module is "owned" by exactly one iSCSI instance, and all the other table entries in the module include this table's index as their primary index. Main character energy for sure 💜
Most implementations will include just one iSCSI instance row in this table. BUT this table exists so you can have multiple virtual instances 🦋 For example, lots of IP routing products now allow multiple virtual routers, and the iSCSI MIB module has the same premise: a large system could be "partitioned" into multiple, distinct virtual systems. Iconic 💅
This also lets a single SNMP agent proxy for multiple subsystems, like a set of stackable devices, where each one has one or even more instances 🌸
The instance attributes include the iSCSI vendor and version, plus information on the last target or initiator at the other end of a session that caused a session failure 😭
The iscsiInstanceSsnErrorStatsTable augments the attributes table and gives statistics on session failures due to digest, connection, or iSCSI format errors 🔥
6.4. iscsiPortal 🎀
The iscsiPortalAttributesTable lists iSCSI portals that can be used to listen for connections to targets, to initiate connections to other targets, or to do both ✨
Each row includes an IP address (either v4 or v6) and a transport protocol (currently only TCP is defined) 🍓 Each portal may have additional attributes depending on whether it's an initiator portal, a target portal, or both. Initiator portals also have portal tags, and those go into corresponding rows in the iscsiIntrPortalAttributesTable. Target portals have both portal tags and ports (for example, TCP listen ports if the transport protocol is TCP), and those go into rows in the iscsiTgtPortalAttributesTable 💖
Portal rows, along with their initiator and target portal counterparts, can be created and destroyed through this MIB module by a management station 🫶 Rows in the initiator and target portal tables are created and destroyed automatically by the agent, whenever a row is created or destroyed in the iscsiPortalAttributesTable, or if the value of iscsiPortalRoles changes. After that, the management station can modify attributes in these tables if the agent implementation allows it 🧚
When a management station creates a row, the iscsiPortalRoles attribute controls row creation in the initiator and target portal tables. Creating a row with the targetTypePortal bit set in iscsiPortalRoles will make the implementation start listening for iSCSI connections on the portal 👂 Creating a row with the initiatorTypePortal bit set in iscsiPortalRoles will not necessarily cause connections to be established. It's up to the implementation whether and when to use the portal 🤷♀️ Both bits may be set if the portal is going to be used by both initiator and target nodes 🌈
Deleting a row in the iscsiPortalAttibutesTable terminates all connections associated with that row 💀 The implementation may either terminate the connection immediately or request a clean shutdown as specified in [RFC3720]. An outbound connection (when an iscsiInitiatorPortal is deleted) matches the portal if its iscsiCxnLocalAddr matches the iscsiPortalAddr. An inbound connection (when an iscsiTargetPortal is deleted) matches the portal if its iscsiCxnLocalAddr matches the iscsiPortalAddr and its iscsiCxnLocalPort matches the iscsiTargetPortalPort 🎯
Heads up: individual objects within a row in this table can't be modified while the row is active 🚫 So if you need to change the IP address of a portal, the rows tied to the old IP address have to be deleted and new rows created (in either order). No shortcuts, bestie 😭
6.5. iscsiTargetPortal 🦋
The iscsiTgtPortalAttributesTable holds target-specific attributes for iSCSI portals. Its rows use the same indices as their corresponding rows in the iscsiPortalAttributesTable, plus iscsiNodeIndex 🍓
Rows in this table are created when the targetTypePortal bit is set in the iscsiPortalRoles attribute of the corresponding iscsiPortalAttributesEntry, and they're destroyed when that bit is cleared 🫧
This table contains the TCP (or other protocol) port the socket is listening on for incoming connections. It also includes a portal group aggregation tag. iSCSI target portals within this instance that share the same tag can have connections in the same session 🌸
This table will be empty for iSCSI instances that only contain initiators (like iSCSI host driver implementations) 🙈
Lots of implementations use the same target portal tag and protocol port for all nodes accessed via a portal. These implementations create a single row in the iscsiTgtPortalAttributeTable, with an iscsiNodeIndex of zero 💅
Other implementations don't use the same tag and/or port for all nodes. These create a row in this table for each (portal, node) tuple, using iscsiNodeIndex to pick out the node for this portal tag and port 🧩
6.6. iscsiInitiatorPortal 🌷
The iscsiIntrPortalAttributesTable contains initiator-specific objects for iSCSI portals. Its rows use the same indices as their corresponding entries in the iscsiPortalAttributesTable. A row here is created when the initiatorTypePortal bit is set in the iscsiPortalRoles attribute, and it's destroyed when that bit is cleared ✨
Each row contains a portal group aggregation tag, which indicates which portals an initiator may use together within a multiple-connection session 🔗
This table will be empty for iSCSI instances that only contain targets (like most iSCSI devices) 🫠
Many implementations use the same initiator tag for all nodes accessing targets via a given portal. These create a single row in iscsiIntrPortalAttributeTable, with an iscsiNodeIndex of zero 💜
Other implementations don't use the same tag and/or port for all nodes. These create a row in this table for each (portal, node) tuple, using iscsiNodeIndex to designate the node for this portal tag and port 🌈
6.7. iscsiNode 🍰
The iscsiNodeAttributesTable is a list of iSCSI nodes, and each node may have an initiator role, a target role, or both 👑
This table holds the node's attributes that are common to both roles, like its iSCSI name and alias string. Attributes specific to initiators or targets live in the iscsiTarget and iscsiInitiator objects. Each row here that can fulfill a target role has a matching row in the iscsiTarget table, and each entry that fulfills an initiator role has a row in the iscsiInitiator table. Nodes like copy managers that can take on both roles have a corresponding row in each table 🧚
This table also holds the login negotiation preferences for this node. These objects show the values the node will offer or prefer in the operational negotiation phase of the login process 🤝
For most implementations, each entry also contains a RowPointer to the transport table entry in the SCSI MIB module that this iSCSI node represents. For implementations without a standard SCSI layer above iSCSI, like an iSCSI proxy or gateway, this RowPointer can point to a row in an implementation-specific table that the iSCSI node represents 🛠️
6.8. iscsiTarget 🎯
The iscsiTargetAttributesTable contains target-specific attributes for iSCSI nodes. Each entry uses the same index values as its corresponding iscsiNode entry 🫶
This table contains attributes that show the last failure that was (or should have been) sent as a notification 🔔
This table is augmented by the iscsiTargetLoginStatsTable and the iscsiTargetLogoutStatsTable, which count the normal and abnormal logins and logouts to this target 📊
6.9. iscsiTgtAuthorization 🔐
The iscsiTgtAuthAttributesTable contains an entry for each initiator identifier that's allowed to access the target it appears under 🚪 Each entry contains a RowPointer to a user identity in the IPS Authorization MIB module, which holds the name, address, and credential information needed to authenticate the initiator 🪪
6.10. iscsiInitiator 🌟
The iscsiInitiatorAttributesTable contains a list of initiator-specific attributes for iSCSI nodes. Each entry uses the same index values as its corresponding iscsiNode entry 💖
Most implementations will include a single entry in this table, no matter how many physical interfaces the initiator uses 🦋
This table is augmented by the iscsiInitiatorLoginStatsTable and the iscsiInitiatorLogoutStatsTable, which count the normal and abnormal logins and logouts from this initiator 📈
6.11. iscsiIntrAuthorization 🛡️
The iscsiIntrAuthAttributesTable contains an entry for each target identifier that the initiator is configured to establish a session with 🤝
Each entry contains a RowPointer to a user identity in the IPS Authorization MIB module, which holds the name, address, and credential information needed to identify (for discovery purposes) and authenticate the target 🔑
6.12. iscsiSession ✨
Okay bestie, the iscsiSessionAttributesTable is basically the guest list 📋. It has one row for every session that's known to be hanging out locally for each node in each iSCSI instance. No ghosts allowed 👻
Each session has a session type, and this tells you if it's a regular SCSI command session or a discovery session that uses the SendTargets text command 🔍. Discovery sessions that don't belong to any particular node get a node index attribute of zero. Zero is their whole vibe 🧚
The session direction is giving "who's calling who" 📞. An Inbound session comes from some other initiator and lands on the target node it shows up under. An Outbound session goes from the initiator node it's listed under to a target outside this iSCSI instance. Two directions, zero drama 🦋
Lots of attributes get negotiated when a session starts, and most of them live right inside the session object 💅
Some attributes, like the integrity and authentication schemes, come with standard values, but vendors can add their own schemes too 🌈 These values are object identifiers instead of plain enumerated types, so other MIB modules, like an enterprise MIB module, can extend them. Expansion era ✨
The iscsiSessionStatsTable is the performance tea ☕. It counts iSCSI data bytes and PDUs. Numbers don't lie, periodt 💜
For implementations that can recover from errors without ending a session, the iscsiSessionCxnErrorStatsTable keeps count of the digest and connection errors that happened inside the session 🩹 Keeping receipts 🧾
6.13. iscsiConnection 🌸
The iscsiConnectionAttributesTable is the list of active connections inside each session 🔗. It has the IP addresses and TCP (or other protocol) ports for both the local and the remote side. You can use these to look up more connection info and stats in the TCP MIB module [RFC4022] 🕵️♀️
The attributes table also has a connection state 💫. This state doesn't directly match up with the state tables in the iSCSI specification. It's a simplified, higher-level version that's easier for a user or network manager to actually understand. Less jargon, more vibes 🫶
No statistics are kept for connections 🙈
6.14. IP Addresses and TCP Port Numbers 🦋
The IP addresses in this module are shown with two attributes: one is an InetAddressType and the other is an InetAddress 🌐. These come from [RFC4001], which explains how to handle addresses that can be IPv4 or IPv6. Both versions, one vibe 💖
Some structures have TCP port numbers, but they're just called port numbers, with a protocol attribute that says whether it's a TCP port or something else 🎀 That way, if iSCSI ever runs over transports other than TCP, this module will still fit in 🧚♀️ Future-proof, iconic 👑
6.15. Descriptors: Using OIDs in Place of Enumerated Types 💜
Okay so the iSCSI MIB module has a few attributes, mainly the digest method ones 🔐 An enumerated type would normally be perfect for these, except an implementation might need to add its own digest methods later. That's the problem 😭 To fix it, this MIB module defines a set of object identities inside the iscsiDescriptors subtree 🌳 Each one is basically an enumerated type, just with room to grow.
Attributes that use these object identities hold an Object Identifier (OID) instead of an enumerated type 🔢 The OIDs can point to object identities defined in this module or to ones defined somewhere else, like an enterprise MIB module. If you add your own digest methods, you should also define a matching object identity for each one in your own enterprise MIB module, and then return its OID whenever an attribute is using that method 💅 Main character energy for your custom methods ✨
6.16. Notifications 🚨
There are three notifications 📣. The first is sent by an initiator that detects a critical login failure. The second is sent by a target that detects a critical login failure. The third is sent when a session gets terminated because of an abnormal connection or a digest failure 💥
Critical failures are the ones that might expose security problems that need immediate action, like failures from authentication, authorization, or negotiation problems 🚨 The initiator, target, and instance objects have the attributes needed to fill in the notification, such as the initiator or target name and the IP address on the other end that may have caused the failure 🕵️
To avoid sending a flood of notifications when lots of errors get counted, an SNMP agent implementing the iSCSI MIB module SHOULD NOT send more than three iSCSI notifications in any 10-second period. 🛑
The 3-in-10 rule is giving "just right" 🍓 One notification every three seconds would be fine, but if two or three different notifications happen at the same time, you don't want to suppress them. Three in 10 seconds is the happy medium: a short burst is allowed, but the network and the notification host don't get buried in notifications 🫶
7. MIB Definitions 🎀
ISCSI-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, OBJECT-IDENTITY, NOTIFICATION-TYPE,
Unsigned32, Counter32, Counter64, Gauge32,
mib-2
FROM SNMPv2-SMI
TEXTUAL-CONVENTION, TruthValue, RowPointer, TimeStamp, RowStatus,
AutonomousType, StorageType
FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
FROM SNMPv2-CONF
SnmpAdminString
FROM SNMP-FRAMEWORK-MIB -- RFC 3411
InetAddressType, InetAddress, InetPortNumber
FROM INET-ADDRESS-MIB -- RFC 4001
;
iscsiMibModule MODULE-IDENTITY
LAST-UPDATED "200605220000Z" -- May 22, 2006
ORGANIZATION "IETF IPS Working Group"
CONTACT-INFO
"
Mark Bakke
Cisco Systems, Inc
7900 International Drive, Suite 400
Bloomington, MN
USA 55425
E-mail: mbakke@cisco.com
Marjorie Krueger
Hewlett-Packard
Networked Storage Architecture
Networked Storage Solutions Org.
8000 Foothills Blvd.
Roseville, CA 95747
E-mail: marjorie_krueger@hp.com
Tom McSweeney
IBM Corporation
600 Park Offices Drive
Research Triangle Park, NC
USA 27709
E-mail: tommcs@us.ibm.com
James Muchow
Qlogic Corp.
6321 Bury Dr.
Eden Prairie, MN
USA 55346
E-mail: james.muchow@qlogic.com"
DESCRIPTION
"The iSCSI Protocol MIB module.
Copyright (C) The Internet Society (2006). This version of
this MIB module is part of RFC 4544; see the RFC itself for
full legal notices."
REVISION "200605220000Z" -- May 22, 2006
DESCRIPTION
"Initial version of the iSCSI Protocol MIB module"
::= { mib-2 142 }
iscsiNotifications OBJECT IDENTIFIER ::= { iscsiMibModule 0 }
iscsiObjects OBJECT IDENTIFIER ::= { iscsiMibModule 1 }
iscsiConformance OBJECT IDENTIFIER ::= { iscsiMibModule 2 }
iscsiAdmin OBJECT IDENTIFIER ::= { iscsiMibModule 3 }
-- Textual Conventions
IscsiTransportProtocol ::= TEXTUAL-CONVENTION
DISPLAY-HINT "d"
STATUS current
DESCRIPTION
"This data type is used to define the transport
protocols that will carry iSCSI PDUs."
REFERENCE
"RFC791, RFC1700
The presently known, officially delegated numbers
can be found at:
http://www.iana.org/assignments/protocol-numbers"
SYNTAX Unsigned32 (0..255)
IscsiDigestMethod ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"This data type represents the methods possible
for digest negotiation.
none - a placeholder for a secondary digest method
that means only the primary method can be
used.
other - a digest method other than those defined below.
noDigest - does not support digests (will operate without
a digest (Note: implementations must support
digests to be compliant with the RFC3720).
CRC32c - require a CRC32C digest."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
SYNTAX INTEGER {
none(1),
other(2),
noDigest(3),
crc32c(4)
}
IscsiName ::= TEXTUAL-CONVENTION
DISPLAY-HINT "223t"
STATUS current
DESCRIPTION
"This data type is used for objects whose value is an
iSCSI name with the properties described in RFC 3720
section 3.2.6.1, and encoded as specified in RFC 3720
section 3.2.6.2. A zero-length string indicates the
absence of an iSCSI name."
REFERENCE
"RFC 3720, Section 3.2.6, iSCSI Names."
SYNTAX OCTET STRING (SIZE(0 | 16..223))
--**********************************************************************
iscsiDescriptors OBJECT IDENTIFIER ::= { iscsiAdmin 1 }
iscsiHeaderIntegrityTypes OBJECT IDENTIFIER ::= { iscsiDescriptors 1 }
iscsiHdrIntegrityNone OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The authoritative identifier when no integrity
scheme (for either the header or data) is being
used."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
::= { iscsiHeaderIntegrityTypes 1 }
iscsiHdrIntegrityCrc32c OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The authoritative identifier when the integrity
scheme (for either the header or data) is CRC32c."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
::= { iscsiHeaderIntegrityTypes 2 }
iscsiDataIntegrityTypes OBJECT IDENTIFIER ::= { iscsiDescriptors 2 }
iscsiDataIntegrityNone OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The authoritative identifier when no integrity
scheme (for either the header or data) is being
used."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
::= { iscsiDataIntegrityTypes 1 }
iscsiDataIntegrityCrc32c OBJECT-IDENTITY
STATUS current
DESCRIPTION
"The authoritative identifier when the integrity
scheme (for either the header or data) is CRC32c."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
::= { iscsiDataIntegrityTypes 2 }
--**********************************************************************
iscsiInstance OBJECT IDENTIFIER ::= { iscsiObjects 1 }
-- Instance Attributes Table
iscsiInstanceAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiInstanceAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of iSCSI instances present on the system."
::= { iscsiInstance 1 }
iscsiInstanceAttributesEntry OBJECT-TYPE
SYNTAX IscsiInstanceAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular iSCSI instance."
INDEX { iscsiInstIndex }
::= { iscsiInstanceAttributesTable 1 }Okay bestie, let's keep going 💖 Here's the row layout for the instance attributes table: thirteen columns, like a contact card for each iSCSI instance 📇
IscsiInstanceAttributesEntry ::= SEQUENCE {
iscsiInstIndex Unsigned32,
iscsiInstDescr SnmpAdminString,
iscsiInstVersionMin Unsigned32,
iscsiInstVersionMax Unsigned32,
iscsiInstVendorID SnmpAdminString,
iscsiInstVendorVersion SnmpAdminString,
iscsiInstPortalNumber Unsigned32,
iscsiInstNodeNumber Unsigned32,
iscsiInstSessionNumber Unsigned32,
iscsiInstSsnFailures Counter32,
iscsiInstLastSsnFailureType AutonomousType,
iscsiInstLastSsnRmtNodeName IscsiName,
iscsiInstDiscontinuityTime TimeStamp
}iscsiInstIndex 🎀
The ID tag for each instance 🪪 It's an arbitrary integer that uniquely identifies one iSCSI instance. Don't modify or reuse it unless a reboot has happened, and the agent should try to keep it the same across reboots.
iscsiInstIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a particular
iSCSI instance. This index value must not be modified or
reused by an agent unless a reboot has occurred. An agent
should attempt to keep this value persistent across reboots."
::= { iscsiInstanceAttributesEntry 1 }iscsiInstDescr 🌸
This one is a free-form UTF-8 label. The implementation decides what goes in it. With a single instance it can be the zero-length string, and with several it can say what each one is for 🧚
iscsiInstDescr OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A UTF-8 string, determined by the implementation to
describe the iSCSI instance. When only a single instance
is present, this object may be set to the zero-length
string; with multiple iSCSI instances, it may be used in
an implementation-dependent manner to describe the purpose
of the respective instance."
::= { iscsiInstanceAttributesEntry 2 }iscsiInstVersionMin 🦋
The lowest version of the iSCSI specification this instance supports. The range runs from this value up to the iscsiInstVersionMax value, including everything in between. The reference points to RFC 3720 🔍
iscsiInstVersionMin OBJECT-TYPE
SYNTAX Unsigned32 (0..255)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The minimum version number of the iSCSI specification
such that this iSCSI instance supports this minimum
value, the maximum value indicated by the corresponding
instance in iscsiInstVersionMax, and all versions in
between."
REFERENCE
"RFC 3720, Section 10.12, Login Request"
::= { iscsiInstanceAttributesEntry 3 }iscsiInstVersionMax 🦋
The mirror of the one above: the highest spec version this instance supports, with everything between the two included too 💫
iscsiInstVersionMax OBJECT-TYPE
SYNTAX Unsigned32 (0..255)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum version number of the iSCSI specification
such that this iSCSI instance supports this maximum
value, the minimum value indicated by the corresponding
instance in iscsiInstVersionMin, and all versions in
between."
REFERENCE
"RFC 3720, Section 10.12, Login Request"
::= { iscsiInstanceAttributesEntry 4 }iscsiInstVendorID 🏷️
A UTF-8 string naming the manufacturer of this instance's implementation 🏭
iscsiInstVendorID OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A UTF-8 string describing the manufacturer of the
implementation of this instance."
::= { iscsiInstanceAttributesEntry 5 }iscsiInstVendorVersion 🧁
This is the manufacturer's own version label. The format is up to the manufacturer and it's just for information. It has nothing to do with the iSCSI spec version numbers, so don't mix them up 🙅♀️
iscsiInstVendorVersion OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A UTF-8 string set by the manufacturer describing the
version of the implementation of this instance. The
format of this string is determined solely by the
manufacturer, and is for informational purposes only.
It is unrelated to the iSCSI specification version numbers."
::= { iscsiInstanceAttributesEntry 6 }iscsiInstPortalNumber 🚪
A count of the rows in the portal table that are currently tied to this instance. The unit is transport endpoints 🔌
iscsiInstPortalNumber OBJECT-TYPE
SYNTAX Unsigned32
UNITS "transport endpoints"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of rows in the iscsiPortalAttributesTable
that are currently associated with this iSCSI instance."
::= { iscsiInstanceAttributesEntry 7 }iscsiInstNodeNumber 🫧
Same idea, but for the node table. This is how many iSCSI nodes are currently linked to the instance 🪩
iscsiInstNodeNumber OBJECT-TYPE
SYNTAX Unsigned32
UNITS "iSCSI nodes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of rows in the iscsiNodeAttributesTable
that are currently associated with this iSCSI instance."
::= { iscsiInstanceAttributesEntry 8 }iscsiInstSessionNumber 🎟️
And the session version: how many rows in the session table are currently tied to this instance 📊
iscsiInstSessionNumber OBJECT-TYPE
SYNTAX Unsigned32
UNITS "sessions"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of rows in the iscsiSessionAttributesTable
that are currently associated with this iSCSI instance."
::= { iscsiInstanceAttributesEntry 9 }iscsiInstSsnFailures 💀
This is the failure tally. It counts how many times a session belonging to this instance has been failed. If the counter ever has a discontinuity, the time of that last discontinuity is in iscsiInstDiscontinuityTime. The reference is RFC 3720 🫠
iscsiInstSsnFailures OBJECT-TYPE
SYNTAX Counter32
UNITS "sessions"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object counts the number of times a session belonging
to this instance has been failed. If this counter has
suffered a discontinuity, the time of the last discontinuity
is indicated in iscsiInstDiscontinuityTime."
REFERENCE
"RFC 3720, Section 12.1, HeaderDigest and DataDigest"
::= { iscsiInstanceAttributesEntry 10 }iscsiInstLastSsnFailureType 🕵️♀️
This one tells you the reason the last session failed It points at the counter in the session error stats table that got bumped when the most recent failure happened. If the reason isn't in that table, the value { 0.0 } gets used instead ✨
iscsiInstLastSsnFailureType OBJECT-TYPE
SYNTAX AutonomousType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The counter object in the iscsiInstSsnErrorStatsTable
that was incremented when the last session failure occurred.
If the reason for failure is not found in the
iscsiInstSsnErrorStatsTable, the value { 0.0 } is
used instead."
::= { iscsiInstanceAttributesEntry 11 }iscsiInstLastSsnRmtNodeName 🪪
The iSCSI name of the remote node that was on the other end of the failed session 📛
iscsiInstLastSsnRmtNodeName OBJECT-TYPE
SYNTAX IscsiName
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The iSCSI name of the remote node from the failed
session."
::= { iscsiInstanceAttributesEntry 12 }iscsiInstDiscontinuityTime ⏰
This is the SysUpTime from the most recent moment when any of this instance's counters had a discontinuity. If nothing like that has happened since the local management subsystem was last re-initialized, the object holds a zero value 🕰️
iscsiInstDiscontinuityTime OBJECT-TYPE
SYNTAX TimeStamp
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of SysUpTime on the most recent occasion
at which any one or more of this instance's counters
suffered a discontinuity.
If no such discontinuities have occurred since the last
re-initialization of the local management subsystem,
then this object contains a zero value."
::= { iscsiInstanceAttributesEntry 13 }Instance Session Failure Stats Table 💅
Now for the error-stats side of the instance 🩰 This table breaks down the kinds of errors that caused a session to fail.
-- Instance Session Failure Stats Table
iscsiInstanceSsnErrorStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiInstanceSsnErrorStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Statistics regarding the occurrences of error types
that result in a session failure."
::= { iscsiInstance 2 }
iscsiInstanceSsnErrorStatsEntry OBJECT-TYPE
SYNTAX IscsiInstanceSsnErrorStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular iSCSI instance."
AUGMENTS { iscsiInstanceAttributesEntry }
::= { iscsiInstanceSsnErrorStatsTable 1 }
IscsiInstanceSsnErrorStatsEntry ::= SEQUENCE {
iscsiInstSsnDigestErrors Counter32,
iscsiInstSsnCxnTimeoutErrors Counter32,
iscsiInstSsnFormatErrors Counter32
}iscsiInstSsnDigestErrors 🧩
A count of sessions that failed because a PDU came in with a header or data digest error. The reference is RFC 3720, Section 6.7 🔐
iscsiInstSsnDigestErrors OBJECT-TYPE
SYNTAX Counter32
UNITS "sessions"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of sessions that were failed due to receipt of
a PDU containing header or data digest errors. If this
counter has suffered a discontinuity, the time of the last
discontinuity is indicated in iscsiInstDiscontinuityTime."
REFERENCE
"RFC 3720, Section 6.7, Digest Errors"
::= { iscsiInstanceSsnErrorStatsEntry 1 }iscsiInstSsnCxnTimeoutErrors ⏳
A count of sessions that failed because a sequence went over a time limit. The reference is RFC 3720, Section 6.4 🕒
iscsiInstSsnCxnTimeoutErrors OBJECT-TYPE
SYNTAX Counter32
UNITS "sessions"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of sessions that were failed due to a sequence
exceeding a time limit. If this counter has suffered a
discontinuity, the time of the last discontinuity
is indicated in iscsiInstDiscontinuityTime."
REFERENCE
"RFC 3720, Section 6.4, Connection Timeout Management"
::= { iscsiInstanceSsnErrorStatsEntry 2 }iscsiInstSsnFormatErrors 📝
A count of sessions that failed because a PDU had a format error. The reference is RFC 3720, Section 6.6 🧾
iscsiInstSsnFormatErrors OBJECT-TYPE
SYNTAX Counter32
UNITS "sessions"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of sessions that were failed due to receipt of
a PDU that contained a format error. If this counter has
suffered a discontinuity, the time of the last discontinuity
is indicated in iscsiInstDiscontinuityTime."
REFERENCE
"RFC 3720, Section 6.6, Format Errors"
::= { iscsiInstanceSsnErrorStatsEntry 3 }Portal Attributes Table 🚪✨
Next up is the portal side. Portals are the transport endpoints this instance uses, and it can listen for incoming connections, start connections out, or do both 🔌
--**********************************************************************
iscsiPortal OBJECT IDENTIFIER ::= { iscsiObjects 2 }
-- Portal Attributes Table
iscsiPortalAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of transport endpoints (using TCP or another transport
protocol) used by this iSCSI instance. An iSCSI instance may
use a portal to listen for incoming connections to its targets,
to initiate connections to other targets, or both."
::= { iscsiPortal 1 }
iscsiPortalAttributesEntry OBJECT-TYPE
SYNTAX IscsiPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular portal instance."
INDEX { iscsiInstIndex, iscsiPortalIndex }
::= { iscsiPortalAttributesTable 1 }
IscsiPortalAttributesEntry ::= SEQUENCE {
iscsiPortalIndex Unsigned32,
iscsiPortalRowStatus RowStatus,
iscsiPortalRoles BITS,
iscsiPortalAddrType InetAddressType,
iscsiPortalAddr InetAddress,
iscsiPortalProtocol IscsiTransportProtocol,
iscsiPortalMaxRecvDataSegLength Unsigned32,
iscsiPortalPrimaryHdrDigest IscsiDigestMethod,
iscsiPortalPrimaryDataDigest IscsiDigestMethod,
iscsiPortalSecondaryHdrDigest IscsiDigestMethod,
iscsiPortalSecondaryDataDigest IscsiDigestMethod,
iscsiPortalRecvMarker TruthValue,
iscsiPortalStorageType StorageType
}iscsiPortalIndex 🪪
An arbitrary integer that uniquely identifies a particular transport endpoint within this iSCSI instance. Same deal as before: don't modify or reuse it unless a reboot has happened, and try to keep it persistent across reboots 💜
iscsiPortalIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a particular
transport endpoint within this iSCSI instance. This index
value must not be modified or reused by an agent unless a
reboot has occurred. An agent should attempt to keep this
value persistent across reboots."
::= { iscsiPortalAttributesEntry 1 }iscsiPortalRowStatus 🎛️
This is how rows get added and removed in this table over SNMP. When you add a row, every non-Index/RowStatus object has to be set. Once the value is 'active', the other objects in the table can't be changed. Rows can be discarded using RowStatus.
Heads up: creating a row here will usually make the agent create one or more rows in iscsiTgtPortalAttributesTable and/or iscsiIntrPortalAttributesTable too 👀
iscsiPortalRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This field allows entries to be dynamically added and
removed from this table via SNMP. When adding a row to
this table, all non-Index/RowStatus objects must be set.
When the value of this object is 'active', the values of
the other objects in this table cannot be changed.
Rows may be discarded using RowStatus.
Note that creating a row in this table will typically
cause the agent to create one or more rows in
iscsiTgtPortalAttributesTable and/or
iscsiIntrPortalAttributesTable."
::= { iscsiPortalAttributesEntry 2 }okay bestie, this is where the portal roles get defined 🎀✨ a portal can be a target portal, an initiator portal, or both, and the bits tell you which 💅
iscsiPortalRoles OBJECT-TYPE
SYNTAX BITS {
targetTypePortal(0),
initiatorTypePortal(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A portal can operate in one or both of two roles:
as a target portal and/or an initiator portal. If
the portal will operate in both roles, both bits
must be set.
This object will define a corresponding row that
will exist or must be created in the
iscsiTgtPortalAttributesTable, the
iscsiIntrPortalAttributesTable or both. If the
targetTypePortal bit is set, one or more corresponding
iscsiTgtPortalAttributesEntry rows will be found or
created. If the initiatorTypePortal bit is set,
one or more corresponding iscsiIntrPortalAttributesEntry
rows will be found or created. If both bits are set, one
or more corresponding rows will be found or created in
one of the above tables."
::= { iscsiPortalAttributesEntry 3 }
iscsiPortalAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The type of Internet Network Address contained in the
corresponding instance of the iscsiPortalAddr."
DEFVAL { ipv4 }
::= { iscsiPortalAttributesEntry 4 }
iscsiPortalAddr OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The portal's Internet Network Address, of the type
specified by the object iscsiPortalAddrType. If
iscsiPortalAddrType has the value 'dns', this address
gets resolved to an IP address whenever a new iSCSI
connection is established using this portal."
::= { iscsiPortalAttributesEntry 5 }
iscsiPortalProtocol OBJECT-TYPE
SYNTAX IscsiTransportProtocol
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The portal's transport protocol."
DEFVAL { 6 } -- TCP
::= { iscsiPortalAttributesEntry 6 }
iscsiPortalMaxRecvDataSegLength OBJECT-TYPE
SYNTAX Unsigned32 (512..16777215)
UNITS "bytes"
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The maximum PDU length this portal can receive.
This may be constrained by hardware characteristics
and individual implementations may choose not to
allow this object to be changed."
REFERENCE
"RFC 3720, Section 12.12, MaxRecvDataSegmentLength"
DEFVAL { 8192 }
::= { iscsiPortalAttributesEntry 7 }
iscsiPortalPrimaryHdrDigest OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The preferred header digest for this portal."
DEFVAL { crc32c }
::= { iscsiPortalAttributesEntry 8 }
iscsiPortalPrimaryDataDigest OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The preferred data digest method for this portal."
DEFVAL { crc32c }
::= { iscsiPortalAttributesEntry 9 }
iscsiPortalSecondaryHdrDigest OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"An alternate header digest preference for this portal."
DEFVAL { noDigest }
::= { iscsiPortalAttributesEntry 10 }
iscsiPortalSecondaryDataDigest OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"An alternate data digest preference for this portal."
DEFVAL { noDigest }
::= { iscsiPortalAttributesEntry 11 }
iscsiPortalRecvMarker OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object indicates whether or not this portal will
request markers in its incoming data stream."
REFERENCE
"RFC 3720, Appendix A."
DEFVAL { false }
::= { iscsiPortalAttributesEntry 12 }
iscsiPortalStorageType OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The storage type for this row. Rows in this table that were
created through an external process may have a storage type of
readOnly or permanent.
Conceptual rows having the value 'permanent' need not
allow write access to any columnar objects in the row."
DEFVAL { nonVolatile }
::= { iscsiPortalAttributesEntry 13 }okay now we're getting into the target side 🦋 the target portal table is where the portal listens for incoming connections to its targets, and the node index is the tiny key that tells each row apart 🧚
--**********************************************************************
iscsiTargetPortal OBJECT IDENTIFIER ::= { iscsiObjects 3 }
-- Target Portal Attributes Table
iscsiTgtPortalAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiTgtPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of transport endpoints (using TCP or another transport
protocol) on which this iSCSI instance listens for incoming
connections to its targets."
::= { iscsiTargetPortal 1 }
iscsiTgtPortalAttributesEntry OBJECT-TYPE
SYNTAX IscsiTgtPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular portal instance that is used to listen for
incoming connections to local targets. One or more rows in
this table is populated by the agent for each
iscsiPortalAttributesEntry row that has the bit
targetTypePortal set in its iscsiPortalRoles column."
INDEX { iscsiInstIndex, iscsiPortalIndex,
iscsiTgtPortalNodeIndexOrZero }
::= { iscsiTgtPortalAttributesTable 1 }
IscsiTgtPortalAttributesEntry ::= SEQUENCE {
iscsiTgtPortalNodeIndexOrZero Unsigned32,
iscsiTgtPortalPort InetPortNumber,
iscsiTgtPortalTag Unsigned32
}
iscsiTgtPortalNodeIndexOrZero OBJECT-TYPE
SYNTAX Unsigned32 (0..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a
particular node within an iSCSI instance present
on the local system.
For implementations where each {portal, node} tuple
can have a different portal tag, this value will
map to the iscsiNodeIndex.
For implementations where the portal tag is the
same for a given portal regardless of which node
is using the portal, the value 0 (zero) is used."
::= { iscsiTgtPortalAttributesEntry 1 }
iscsiTgtPortalPort OBJECT-TYPE
SYNTAX InetPortNumber (1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The portal's transport protocol port number on which the
portal listens for incoming iSCSI connections when the
portal is used as a target portal. This object's storage
type is specified in iscsiPortalStorageType."
::= { iscsiTgtPortalAttributesEntry 2 }
iscsiTgtPortalTag OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The portal's aggregation tag when the portal is used as
a target portal. Multiple-connection sessions may
be aggregated over portals sharing an identical
aggregation tag. This object's storage type is
specified in iscsiPortalStorageType."
REFERENCE
"RFC 3720, Section 3.4.1, iSCSI Architectural Model"
::= { iscsiTgtPortalAttributesEntry 3 }
--**********************************************************************
iscsiInitiatorPortal OBJECT IDENTIFIER ::= { iscsiObjects 4 }
-- Initiator Portal Attributes Table
iscsiIntrPortalAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiIntrPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of Internet Network Addresses (using TCP or another
transport protocol) from which this iSCSI instance may
initiate connections to other targets."
::= { iscsiInitiatorPortal 1 }
iscsiIntrPortalAttributesEntry OBJECT-TYPE
SYNTAX IscsiIntrPortalAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular portal instance that is used to initiate
connections to iSCSI targets. One or more rows in
this table is populated by the agent for each
iscsiPortalAttributesEntry row that has the bit
initiatorTypePortal set in its iscsiPortalRoles column."
INDEX { iscsiInstIndex, iscsiPortalIndex,
iscsiIntrPortalNodeIndexOrZero }
::= { iscsiIntrPortalAttributesTable 1 }
IscsiIntrPortalAttributesEntry ::= SEQUENCE {
iscsiIntrPortalNodeIndexOrZero Unsigned32,
iscsiIntrPortalTag Unsigned32
}
iscsiIntrPortalNodeIndexOrZero OBJECT-TYPE
SYNTAX Unsigned32 (0..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a
particular node within an iSCSI instance present
on the local system.
For implementations where each {portal, node} tuple
can have a different portal tag, this value will
map to the iscsiNodeIndex.
For implementations where the portal tag is the
same for a given portal regardless of which node
is using the portal, the value 0 (zero) is used."
::= { iscsiIntrPortalAttributesEntry 1 }
iscsiIntrPortalTag OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The portal's aggregation tag when the portal is used as
an initiator portal. Multiple-connection sessions may
be aggregated over portals sharing an identical
aggregation tag. This object's storage type is
specified in iscsiPortalStorageType."
REFERENCE
"RFC 3720, Section 3.4.1, iSCSI Architectural Model"
::= { iscsiIntrPortalAttributesEntry 2 }
--**********************************************************************
iscsiNode OBJECT IDENTIFIER ::= { iscsiObjects 5 }
-- Node Attributes Table
iscsiNodeAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiNodeAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of iSCSI nodes belonging to each iSCSI instance
present on the local system. An iSCSI node can act as
an initiator, a target, or both."
::= { iscsiNode 1 }
iscsiNodeAttributesEntry OBJECT-TYPE
SYNTAX IscsiNodeAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular iSCSI node."
INDEX { iscsiInstIndex, iscsiNodeIndex }
::= { iscsiNodeAttributesTable 1 }Okay so the node table is where this gets juicy 💅 Every node gets a row of attributes, and the defaults are giving "I already know what I want." 🎀
IscsiNodeAttributesEntry ::= SEQUENCE {
iscsiNodeIndex Unsigned32,
iscsiNodeName IscsiName,
iscsiNodeAlias SnmpAdminString,
iscsiNodeRoles BITS,
iscsiNodeTransportType RowPointer,
iscsiNodeInitialR2T TruthValue,
iscsiNodeImmediateData TruthValue,
iscsiNodeMaxOutstandingR2T Unsigned32,
iscsiNodeFirstBurstLength Unsigned32,
iscsiNodeMaxBurstLength Unsigned32,
iscsiNodeMaxConnections Unsigned32,
iscsiNodeDataSequenceInOrder TruthValue,
iscsiNodeDataPDUInOrder TruthValue,
iscsiNodeDefaultTime2Wait Unsigned32,
iscsiNodeDefaultTime2Retain Unsigned32,
iscsiNodeErrorRecoveryLevel Unsigned32,
iscsiNodeDiscontinuityTime TimeStamp,
iscsiNodeStorageType StorageType
}First up is the index, the little ID that tells each node apart within an iSCSI instance 🦋 It's Unsigned32 from 1 to 4294967295, and the agent can't change or reuse it unless there's been a reboot. The agent should also try to keep it the same across reboots, which is very "consistency is iconic" of it. ✨
iscsiNodeIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a particular
node within an iSCSI instance. This index value must not be
modified or reused by an agent unless a reboot has occurred.
An agent should attempt to keep this value persistent across
reboots."
::= { iscsiNodeAttributesEntry 1 }
iscsiNodeName OBJECT-TYPE
SYNTAX IscsiName
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This node's iSCSI name, which is independent of the location
of the node, and can be resolved into a set of addresses
through various discovery services."
::= { iscsiNodeAttributesEntry 2 }The name is the node's iSCSI name, and it doesn't care where the node lives. You can resolve it into a set of addresses through discovery services, so it's basically the main character who can show up anywhere 🌈
iscsiNodeAlias OBJECT-TYPE
SYNTAX SnmpAdminString
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A character string that is a human-readable name or
description of the iSCSI node. If configured, this alias
may be communicated to the initiator or target node at
the remote end of the connection during a Login Request
or Response message. This string is not used as an
identifier, but can be displayed by the system's user
interface in a list of initiators and/or targets to
which it is connected.
If no alias exists, the value is a zero-length string."
REFERENCE
"RFC 3720, Section 12.6, TargetAlias, 12.7, InitiatorAlias"
::= { iscsiNodeAttributesEntry 3 }The alias is the nickname, the cute little display name 🍓 If it's set, it can get passed to the other end during a Login Request or Response message. It's not an identifier, though, so it's purely for pretty lists in the UI. If there's no alias, it's just an empty string, which is honestly very mysterious and I respect it 🙈
iscsiNodeRoles OBJECT-TYPE
SYNTAX BITS {
targetTypeNode(0),
initiatorTypeNode(1)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A node can operate in one or both of two roles:
a target role and/or an initiator role. If the node
will operate in both roles, both bits must be set.
This object will also define the corresponding rows that
will exist in the iscsiTargetAttributesTable, the
iscsiInitiatorAttributesTable or both. If the
targetTypeNode bit is set, there will be a corresponding
iscsiTargetAttributesEntry. If the initiatorTypeNode bit
is set, there will be a corresponding
iscsiInitiatorAttributesEntry. If both bits are set,
there will be a corresponding iscsiTgtPortalAttributesEntry
and iscsiPortalAttributesEntry."
::= { iscsiNodeAttributesEntry 4 }Roles are giving multi-hyphenate energy 💜 A node can be a target, an initiator, or both, and the bits tell you which rows should show up in the other tables. If it's both, both bits get set, and you get the target entry and the portal entries too. Very organised, very "I have a plan" 👑
iscsiNodeTransportType OBJECT-TYPE
SYNTAX RowPointer
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A pointer to the corresponding row in the appropriate
table for this SCSI transport, thereby allowing management
stations to locate the SCSI-level device that is represented
by this iscsiNode. For example, it will usually point to the
corresponding scsiTrnspt object in the SCSI MIB module.
If no corresponding row exists, the value 0.0 must be
used to indicate this."
REFERENCE
"SCSI-MIB"
::= { iscsiNodeAttributesEntry 5 }This one is a pointer 🧚 It leads management stations to the matching SCSI-level device, usually a scsiTrnspt object in the SCSI MIB module. If there's no matching row, the value is 0.0, which is how you say "nothing here, bestie" 🫶
iscsiNodeInitialR2T OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates the InitialR2T preference for this
node:
true = YES,
false = will try to negotiate NO, will accept YES "
REFERENCE
"RFC 3720, Section 12.10, InitialR2T"
::= { iscsiNodeAttributesEntry 6 }
iscsiNodeImmediateData OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object indicates ImmediateData preference for this
node:
true = YES (but will accept NO),
false = NO "
REFERENCE
"RFC 3720, Section 12.11, ImmediateData"
DEFVAL { true }
::= { iscsiNodeAttributesEntry 7 }These two are all about preferences, and the vibe is very "I'll ask nicely but I'm flexible" 🌸 For InitialR2T, true means YES, and false means it'll try to negotiate NO but will accept YES. For ImmediateData, true is YES but it'll take NO too, and false is NO. Both are read-only or read-write depending on the object, and ImmediateData defaults to { true } 💖
iscsiNodeMaxOutstandingR2T OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
UNITS "R2Ts"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Maximum number of outstanding requests-to-transmit (R2Ts)
allowed per iSCSI task."
REFERENCE
"RFC 3720, Section 12.17, MaxOutstandingR2T"
DEFVAL { 1 }
::= { iscsiNodeAttributesEntry 8 }
iscsiNodeFirstBurstLength OBJECT-TYPE
SYNTAX Unsigned32 (512..16777215)
UNITS "bytes"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum length (bytes) supported for unsolicited data
to/from this node."
REFERENCE
"RFC 3720, Section 12.14, FirstBurstLength"
DEFVAL { 65536 }
::= { iscsiNodeAttributesEntry 9 }
iscsiNodeMaxBurstLength OBJECT-TYPE
SYNTAX Unsigned32 (512..16777215)
UNITS "bytes"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum number of bytes that can be sent within
a single sequence of Data-In or Data-Out PDUs."
REFERENCE
"RFC 3720, Section 12.13, MaxBurstLength"
DEFVAL { 262144 }
::= { iscsiNodeAttributesEntry 10 }Now the burst and R2T limits, which are all about how much data is allowed in one go 🔥 Outstanding R2Ts go from 1 to 65535 per iSCSI task, and the default is 1. FirstBurstLength is how much unsolicited data is allowed, measured in bytes between 512 and 16777215, with a default of 65536. MaxBurstLength is the cap for one sequence of Data-In or Data-Out PDUs, with a default of 262144. Honestly, it's giving "pace yourself, sweetie" 💅
iscsiNodeMaxConnections OBJECT-TYPE
SYNTAX Unsigned32 (1..65535)
UNITS "connections"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum number of connections allowed in each
session to and/or from this node."
REFERENCE
"RFC 3720, Section 12.2, MaxConnections"
DEFVAL { 1 }
::= { iscsiNodeAttributesEntry 11 }MaxConnections is the number of connections allowed in each session to and/or from this node, from 1 to 65535, defaulting to 1 🦋 Simple, clean, no drama.
iscsiNodeDataSequenceInOrder OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The DataSequenceInOrder preference of this node.
False (=No) indicates that iSCSI data PDU sequences may
be transferred in any order. True (=Yes) indicates that
data PDU sequences must be transferred using
continuously increasing offsets, except during
error recovery."
REFERENCE
"RFC 3720, Section 12.19, DataSequenceInOrder"
DEFVAL { true }
::= { iscsiNodeAttributesEntry 12 }
iscsiNodeDataPDUInOrder OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The DataPDUInOrder preference of this node.
False (=No) indicates that iSCSI data PDUs within sequences
may be in any order. True (=Yes) indicates that data PDUs
within sequences must be at continuously increasing
addresses, with no gaps or overlay between PDUs."
REFERENCE
"RFC 3720, Section 12.18, DataPDUInOrder"
DEFVAL { true }
::= { iscsiNodeAttributesEntry 13 }Ordering is a whole thing 🌈 With DataSequenceInOrder, false means sequences can go in any order, and true means they go in continuously increasing offsets, except during error recovery. DataPDUInOrder is the same energy one level down, so within sequences the PDUs are at continuously increasing addresses with no gaps or overlaps when it's true. Both default to { true }, so everything's neat until you say otherwise 🎀
iscsiNodeDefaultTime2Wait OBJECT-TYPE
SYNTAX Unsigned32 (0..3600)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The DefaultTime2Wait preference of this node. This is the
minimum time, in seconds, to wait before attempting an
explicit/implicit logout or active iSCSI task reassignment
after an unexpected connection termination or a connection
reset."
REFERENCE
"RFC 3720, Section 12.15, DefaultTime2Wait"
DEFVAL { 2 }
::= { iscsiNodeAttributesEntry 14 }
iscsiNodeDefaultTime2Retain OBJECT-TYPE
SYNTAX Unsigned32 (0..3600)
UNITS "seconds"
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The DefaultTime2Retain preference of this node. This is
the maximum time, in seconds after an initial wait
(Time2Wait), before which an active iSCSI task reassignment
is still possible after an unexpected connection termination
or a connection reset."
REFERENCE
"RFC 3720, Section 12.16, DefaultTime2Retain"
DEFVAL { 20 }
::= { iscsiNodeAttributesEntry 15 }The timers are giving "wait for it" 🙈 Time2Wait is the minimum number of seconds to wait before trying an explicit or implicit logout, or reassigning an active task, after a connection drops unexpectedly or gets reset. Time2Retain is the maximum window after that initial wait, during which reassigning the task is still possible. Both go from 0 to 3600 seconds, with defaults of 2 and 20.
iscsiNodeErrorRecoveryLevel OBJECT-TYPE
SYNTAX Unsigned32 (0..255)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The ErrorRecoveryLevel preference of this node.
Currently, only 0-2 are valid.
This object is designed to accommodate future error recovery
levels.
Higher error recovery levels imply support in addition to
support for the lower error level functions. In other words,
error level 2 implies support for levels 0-1, since those
functions are subsets of error level 2."
REFERENCE
"RFC 3720, Section 12.20, ErrorRecoveryLevel"
DEFVAL { 0 }
::= { iscsiNodeAttributesEntry 16 }ErrorRecoveryLevel is the glow-up ladder 🧚 Right now only 0 to 2 are valid, but the object's built to fit future levels too. Higher levels include everything below them, so level 2 covers levels 0 and 1. The default is { 0 }, which is a very humble start 💜
iscsiNodeDiscontinuityTime OBJECT-TYPE
SYNTAX TimeStamp
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The value of SysUpTime on the most recent occasion
at which any one or more of this node's counters
suffered a discontinuity.
If no such discontinuities have occurred since the last
re-initialization of the local management subsystem,
then this object contains a zero value."
::= { iscsiNodeAttributesEntry 17 }DiscontinuityTime is the moment, measured by SysUpTime, when any of this node's counters last had a glitch 📈 If nothing's glitched since the management subsystem last reinitialised, the value is zero, which is very "never had a bad day" 🌸
iscsiNodeStorageType OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The storage type for all read-write objects within this
row. Rows in this table are always created via an
external process, and may have a storage type of readOnly
or permanent. Conceptual rows having the value 'permanent'
need not allow write access to any columnar objects in
the row.
If this object has the value 'volatile', modifications
to read-write objects in this row are not persistent
across reboots. If this object has the value
'nonVolatile', modifications to objects in this row
are persistent.
An implementation may choose to allow this object
to be set to either 'nonVolatile' or 'volatile',
allowing the management application to choose this
behavior."
DEFVAL { volatile }
::= { iscsiNodeAttributesEntry 18 }
--**********************************************************************
iscsiTarget OBJECT IDENTIFIER ::= { iscsiObjects 6 }
-- Target Attributes Table
iscsiTargetAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiTargetAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of iSCSI nodes that can take on a target role,
belonging to each iSCSI instance present on the local
system."
::= { iscsiTarget 1 }
iscsiTargetAttributesEntry OBJECT-TYPE
SYNTAX IscsiTargetAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular node that can take on a target role."
INDEX { iscsiInstIndex, iscsiNodeIndex }
::= { iscsiTargetAttributesTable 1 }okay bestie, this is where the target's login receipts live 🎀 we start with the attributes entry and its six little fields 💅
IscsiTargetAttributesEntry ::= SEQUENCE {
iscsiTgtLoginFailures Counter32,
iscsiTgtLastFailureTime TimeStamp,
iscsiTgtLastFailureType AutonomousType,
iscsiTgtLastIntrFailureName IscsiName,
iscsiTgtLastIntrFailureAddrType InetAddressType,
iscsiTgtLastIntrFailureAddr InetAddress
}
iscsiTgtLoginFailures OBJECT-TYPE
SYNTAX Counter32
UNITS "failed login attempts"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object counts the number of times a login attempt to this
local target has failed.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetAttributesEntry 1 }
iscsiTgtLastFailureTime OBJECT-TYPE
SYNTAX TimeStamp
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The timestamp of the most recent failure of a login attempt
to this target. A value of zero indicates that no such
failures have occurred since the last system boot."
::= { iscsiTargetAttributesEntry 2 }
iscsiTgtLastFailureType OBJECT-TYPE
SYNTAX AutonomousType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the most recent failure of a login attempt
to this target, represented as the OID of the counter
object in iscsiTargetLoginStatsTable for which the
relevant instance was incremented. A value of 0.0
indicates a type that is not represented by any of
the counters in iscsiTargetLoginStatsTable."
::= { iscsiTargetAttributesEntry 3 }
iscsiTgtLastIntrFailureName OBJECT-TYPE
SYNTAX IscsiName
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The iSCSI name of the initiator that failed the last
login attempt."
::= { iscsiTargetAttributesEntry 4 }
iscsiTgtLastIntrFailureAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of Internet Network Address contained in the
corresponding instance of the iscsiTgtLastIntrFailureAddr.
The value 'dns' is not allowed."
::= { iscsiTargetAttributesEntry 5 }
iscsiTgtLastIntrFailureAddr OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"An Internet Network Address, of the type specified by
the object iscsiTgtLastIntrFailureAddrType, giving the
host address of the initiator that failed the last login
attempt."
::= { iscsiTargetAttributesEntry 6 }next up is the login stats table, which is basically a scoreboard of every way a login attempt can go ✨ the counters are giving main character energy 💖
-- Target Login Stats Table
iscsiTargetLoginStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiTargetLoginStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of counters that keep a record of the results
of initiators' login attempts to this target."
::= { iscsiTarget 2 }
iscsiTargetLoginStatsEntry OBJECT-TYPE
SYNTAX IscsiTargetLoginStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing counters for each result of
a login attempt to this target."
AUGMENTS { iscsiTargetAttributesEntry }
::= { iscsiTargetLoginStatsTable 1 }
IscsiTargetLoginStatsEntry ::= SEQUENCE {
iscsiTgtLoginAccepts Counter32,
iscsiTgtLoginOtherFails Counter32,
iscsiTgtLoginRedirects Counter32,
iscsiTgtLoginAuthorizeFails Counter32,
iscsiTgtLoginAuthenticateFails Counter32,
iscsiTgtLoginNegotiateFails Counter32
}
iscsiTgtLoginAccepts OBJECT-TYPE
SYNTAX Counter32
UNITS "successful logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status
0x0000, Accept Login, transmitted by this
target.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetLoginStatsEntry 1 }
iscsiTgtLoginOtherFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of Login Response PDUs that were transmitted
by this target and that were not counted by any other
object in the row.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetLoginStatsEntry 2 }
iscsiTgtLoginRedirects OBJECT-TYPE
SYNTAX Counter32
UNITS "redirected logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status class 0x01,
Redirection, transmitted by this target.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetLoginStatsEntry 3 }
iscsiTgtLoginAuthorizeFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status 0x0202,
Forbidden Target, transmitted by this target.
If this counter is incremented, an iscsiTgtLoginFailure
notification should be generated.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetLoginStatsEntry 4 }
iscsiTgtLoginAuthenticateFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status 0x0201,
Authentication Failed, transmitted by this target.
If this counter is incremented, an iscsiTgtLoginFailure
notification should be generated.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiTargetLoginStatsEntry 5 }
iscsiTgtLoginNegotiateFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times a target has effectively refused a
login because the parameter negotiation failed.
If this counter is incremented, an iscsiTgtLoginFailure
notification should be generated.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
::= { iscsiTargetLoginStatsEntry 6 }now the logout stats table 🦋 this is where we count how the sessions say bye, the normal way and the ghosting way 👻
-- Target Logout Stats Table
iscsiTargetLogoutStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiTargetLogoutStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"When a target receives a Logout command, it responds
with a Logout Response that carries a status code.
This table contains counters for both normal and
abnormal logout requests received by this target."
::= { iscsiTarget 3 }
iscsiTargetLogoutStatsEntry OBJECT-TYPE
SYNTAX IscsiTargetLogoutStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing counters of Logout Response
PDUs that were received by this target."
AUGMENTS { iscsiTargetAttributesEntry }
::= { iscsiTargetLogoutStatsTable 1 }
IscsiTargetLogoutStatsEntry ::= SEQUENCE {
iscsiTgtLogoutNormals Counter32,
iscsiTgtLogoutOthers Counter32
}
iscsiTgtLogoutNormals OBJECT-TYPE
SYNTAX Counter32
UNITS "normal logouts"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Logout Command PDUs received by this target,
with reason code 0 (closes the session).
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.14.1, Reason Code"
::= { iscsiTargetLogoutStatsEntry 1 }
iscsiTgtLogoutOthers OBJECT-TYPE
SYNTAX Counter32
UNITS "abnormal logouts"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Logout Command PDUs received by this target,
with any reason code other than 0.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.14.1, Reason Code"
::= { iscsiTargetLogoutStatsEntry 2 }
--**********************************************************************last bit for this chunk: the target authorization stuff 🔐 this is the list of who's allowed in the door 🚪✨
iscsiTgtAuthorization OBJECT IDENTIFIER ::= { iscsiObjects 7 }
-- Target Authorization Attributes Table
iscsiTgtAuthAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiTgtAuthAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of initiator identities that are authorized to
access each target node within each iSCSI instance
present on the local system."
::= { iscsiTgtAuthorization 1 }
iscsiTgtAuthAttributesEntry OBJECT-TYPE
SYNTAX IscsiTgtAuthAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information
applicable to a particular target node's authorized
initiator identity."
INDEX { iscsiInstIndex, iscsiNodeIndex, iscsiTgtAuthIndex }
::= { iscsiTgtAuthAttributesTable 1 }
IscsiTgtAuthAttributesEntry ::= SEQUENCE {
iscsiTgtAuthIndex Unsigned32,
iscsiTgtAuthRowStatus RowStatus,
iscsiTgtAuthIdentity RowPointer,
iscsiTgtAuthStorageType StorageType
}
iscsiTgtAuthIndex OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An arbitrary integer used to uniquely identify a particular
target's authorized initiator identity within an iSCSI
instance present on the local system. This index value must
not be modified or reused by an agent unless a reboot has
occurred. An agent should attempt to keep this value
persistent across reboots."
::= { iscsiTgtAuthAttributesEntry 1 }
iscsiTgtAuthRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This field allows entries to be dynamically added and
removed from this table via SNMP. When adding a row to
this table, all non-Index/RowStatus objects must be set.
When the value of this object is 'active', the values of
the other objects in this table cannot be changed.
Rows may be discarded using RowStatus."
::= { iscsiTgtAuthAttributesEntry 2 }
iscsiTgtAuthIdentity OBJECT-TYPE
SYNTAX RowPointer
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A pointer to the corresponding user entry in the IPS-AUTH
MIB module that will be allowed to access this iSCSI target."
REFERENCE
"IPS-AUTH MIB, RFC 4545"okay so this chunk wraps up the target side, then gets into the initiator tables (login counters, timestamps, the whole failure drama) and starts the initiator authorization table 💅
::= { iscsiTgtAuthAttributesEntry 3 }
iscsiTgtAuthStorageType OBJECT-TYPE
SYNTAX StorageType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The storage type for this row. Rows in this table that were
created through an external process may have a storage type of
readOnly or permanent.
Conceptual rows having the value 'permanent' need not
allow write access to any columnar objects in the row."
DEFVAL { nonVolatile }
::= { iscsiTgtAuthAttributesEntry 4 }
--**********************************************************************
iscsiInitiator OBJECT IDENTIFIER ::= { iscsiObjects 8 }
-- Initiator Attributes Table
iscsiInitiatorAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiInitiatorAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of iSCSI nodes that can take on an initiator
role, belonging to each iSCSI instance present on
the local system."
::= { iscsiInitiator 1 }
iscsiInitiatorAttributesEntry OBJECT-TYPE
SYNTAX IscsiInitiatorAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information
applicable to a particular iSCSI node that has
initiator capabilities."
INDEX { iscsiInstIndex, iscsiNodeIndex }
::= { iscsiInitiatorAttributesTable 1 }
IscsiInitiatorAttributesEntry ::= SEQUENCE {
iscsiIntrLoginFailures Counter32,
iscsiIntrLastFailureTime TimeStamp,
iscsiIntrLastFailureType AutonomousType,
iscsiIntrLastTgtFailureName IscsiName,
iscsiIntrLastTgtFailureAddrType InetAddressType,
iscsiIntrLastTgtFailureAddr InetAddress
}
iscsiIntrLoginFailures OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object counts the number of times a login attempt from
this local initiator has failed.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorAttributesEntry 1 }
iscsiIntrLastFailureTime OBJECT-TYPE
SYNTAX TimeStamp
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The timestamp of the most recent failure of a login attempt
from this initiator. A value of zero indicates that no such
failures have occurred since the last system boot."
::= { iscsiInitiatorAttributesEntry 2 }
iscsiIntrLastFailureType OBJECT-TYPE
SYNTAX AutonomousType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of the most recent failure of a login attempt
from this initiator, represented as the OID of the counter
object in iscsiInitiatorLoginStatsTable for which the
relevant instance was incremented. A value of 0.0
indicates a type that is not represented by any of
the counters in iscsiInitiatorLoginStatsTable."
::= { iscsiInitiatorAttributesEntry 3 }
iscsiIntrLastTgtFailureName OBJECT-TYPE
SYNTAX IscsiName
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"A UTF-8 string giving the name of the target that failed
the last login attempt."
::= { iscsiInitiatorAttributesEntry 4 }
iscsiIntrLastTgtFailureAddrType OBJECT-TYPE
SYNTAX InetAddressType
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The type of Internet Network Address contained in the
corresponding instance of the iscsiIntrLastTgtFailureAddr.
The value 'dns' is not allowed."
::= { iscsiInitiatorAttributesEntry 5 }
iscsiIntrLastTgtFailureAddr OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"An Internet Network Address, of the type specified by the
object iscsiIntrLastTgtFailureAddrType, giving the host
address of the target that failed the last login attempt."
::= { iscsiInitiatorAttributesEntry 6 }the failure counters are the tea ☕ the login failure count, the timestamp of the latest failure (zero means nothing has gone wrong since the last boot, which is so calm), and the last failed target's name and address, with the 'dns' address type straight up banned 🙅♀️
-- Initiator Login Stats Table
iscsiInitiatorLoginStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiInitiatorLoginStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of counters which keep track of the results of
this initiator's login attempts."
::= { iscsiInitiator 2 }
iscsiInitiatorLoginStatsEntry OBJECT-TYPE
SYNTAX IscsiInitiatorLoginStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing counters of each result
of this initiator's login attempts."
AUGMENTS { iscsiInitiatorAttributesEntry }
::= { iscsiInitiatorLoginStatsTable 1 }
IscsiInitiatorLoginStatsEntry ::= SEQUENCE {
iscsiIntrLoginAcceptRsps Counter32,
iscsiIntrLoginOtherFailRsps Counter32,
iscsiIntrLoginRedirectRsps Counter32,
iscsiIntrLoginAuthFailRsps Counter32,
iscsiIntrLoginAuthenticateFails Counter32,
iscsiIntrLoginNegotiateFails Counter32
}
iscsiIntrLoginAcceptRsps OBJECT-TYPE
SYNTAX Counter32
UNITS "successful logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status
0x0000, Accept Login, received by this initiator.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorLoginStatsEntry 1 }
iscsiIntrLoginOtherFailRsps OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs received by this
initiator with any status code not counted in the
objects below.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorLoginStatsEntry 2 }
iscsiIntrLoginRedirectRsps OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status class 0x01,
Redirection, received by this initiator.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorLoginStatsEntry 3 }
iscsiIntrLoginAuthFailRsps OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Login Response PDUs with status class 0x201,
Authentication Failed, received by this initiator.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorLoginStatsEntry 4 }
iscsiIntrLoginAuthenticateFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times the initiator has aborted a
login because the target could not be authenticated.
No response is generated.
If this counter is incremented, an iscsiIntrLoginFailure
notification should be generated.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.13.5, Status-Class and Status-Detail"
::= { iscsiInitiatorLoginStatsEntry 5 }
iscsiIntrLoginNegotiateFails OBJECT-TYPE
SYNTAX Counter32
UNITS "failed logins"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times the initiator has aborted a
login because parameter negotiation with the target
failed.
No response is generated.
If this counter is incremented, an iscsiIntrLoginFailure
notification should be generated.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 6.10, Negotiation Failures"
::= { iscsiInitiatorLoginStatsEntry 6 }okay the login stats table is a whole scoreboard 📊 every outcome gets its own counter, from accepted logins to redirects to auth fails to negotiation fails. the authenticate and negotiate ones don't send a response back, and they're supposed to kick off an iscsiIntrLoginFailure notification when they tick up 🔔
-- Initiator Logout Stats Table
iscsiInitiatorLogoutStatsTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiInitiatorLogoutStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"When an initiator attempts to send a Logout command, the target
responds with a Logout Response that carries a status code.
This table contains a list of counters of Logout Response
PDUs of each status code that was received by each
initiator belonging to this iSCSI instance present on this
system."
::= { iscsiInitiator 3 }
iscsiInitiatorLogoutStatsEntry OBJECT-TYPE
SYNTAX IscsiInitiatorLogoutStatsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing counters of Logout Response
PDUs of each status code that was generated by this
initiator."
AUGMENTS { iscsiInitiatorAttributesEntry }
::= { iscsiInitiatorLogoutStatsTable 1 }
IscsiInitiatorLogoutStatsEntry ::= SEQUENCE {
iscsiIntrLogoutNormals Counter32,
iscsiIntrLogoutOthers Counter32
}
iscsiIntrLogoutNormals OBJECT-TYPE
SYNTAX Counter32
UNITS "normal logouts"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Logout Command PDUs generated by this initiator
with reason code 0 (closes the session).
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.14.1, Reason Code"
::= { iscsiInitiatorLogoutStatsEntry 1 }
iscsiIntrLogoutOthers OBJECT-TYPE
SYNTAX Counter32
UNITS "abnormal logouts"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The count of Logout Command PDUs generated by this initiator
with any status code other than 0.
If this counter has suffered a discontinuity, the time of the
last discontinuity is indicated in iscsiNodeDiscontinuityTime."
REFERENCE
"RFC 3720, Section 10.14.1, Reason Code"
::= { iscsiInitiatorLogoutStatsEntry 2 }the logout table is the cute little sibling of the login one 🧸 normal logouts (reason code 0, closing the session) get their own counter, and everything else lands in the abnormal bucket
--**********************************************************************
iscsiIntrAuthorization OBJECT IDENTIFIER ::= { iscsiObjects 9 }
-- Initiator Authorization Attributes Table
iscsiIntrAuthAttributesTable OBJECT-TYPE
SYNTAX SEQUENCE OF IscsiIntrAuthAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A list of target identities that each initiator
on the local system may access."
::= { iscsiIntrAuthorization 1 }
iscsiIntrAuthAttributesEntry OBJECT-TYPE
SYNTAX IscsiIntrAuthAttributesEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry (row) containing management information applicable
to a particular initiator node's authorized target identity."
INDEX { iscsiInstIndex, iscsiNodeIndex, iscsiIntrAuthIndex }::= { iscsiIntrAuthAttributesTable 1 }
IscsiIntrAuthAttributesEntry ::= SEQUENCE { iscsiIntrAuthIndex Unsigned32, iscsiIntrAuthRowStatus RowStatus, iscsiIntrAuthIdentity RowPointer, iscsiIntrAuthStorageType StorageType }
iscsiIntrAuthIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An arbitrary integer used to uniquely identify a particular initiator node's authorized target identity within an iSCSI instance present on the local system. This index value must not be modified or reused by an agent unless a reboot has occurred. An agent should attempt to keep this value persistent across reboots." ::= { iscsiIntrAuthAttributesEntry 1 } iscsiIntrAuthRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "This field allows entries to be dynamically added and removed from this table via SNMP. When adding a row to this table, all non-Index/RowStatus objects must be set. When the value of this object is 'active', the values of the other objects in this table cannot be changed. Rows may be discarded using RowStatus." ::= { iscsiIntrAuthAttributesEntry 2 }
iscsiIntrAuthIdentity OBJECT-TYPE SYNTAX RowPointer MAX-ACCESS read-create STATUS current DESCRIPTION "A pointer to the corresponding user entry in the IPS-AUTH MIB module to which this initiator node should attempt to establish an iSCSI session." REFERENCE "IPS-AUTH MIB, RFC 4545" ::= { iscsiIntrAuthAttributesEntry 3 }
iscsiIntrAuthStorageType OBJECT-TYPE SYNTAX StorageType MAX-ACCESS read-create STATUS current DESCRIPTION "The storage type for this row. Rows in this table that were created through an external process may have a storage type of readOnly or permanent.
Conceptual rows having the value 'permanent' need not allow write access to any columnar objects in the row." DEFVAL { nonVolatile } ::= { iscsiIntrAuthAttributesEntry 4 }
iscsiSession OBJECT IDENTIFIER ::= { iscsiObjects 10 }
-- Session Attributes Table
iscsiSessionAttributesTable OBJECT-TYPE SYNTAX SEQUENCE OF IscsiSessionAttributesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of sessions belonging to each iSCSI instance present on the system." ::= { iscsiSession 1 }
iscsiSessionAttributesEntry OBJECT-TYPE SYNTAX IscsiSessionAttributesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (row) containing management information applicable to a particular session.
If this session is a discovery session that is not attached to any particular node, the iscsiSsnNodeIndex will be zero. Otherwise, the iscsiSsnNodeIndex will have the same value as iscsiNodeIndex." INDEX { iscsiInstIndex, iscsiSsnNodeIndex, iscsiSsnIndex } ::= { iscsiSessionAttributesTable 1 }
IscsiSessionAttributesEntry ::= SEQUENCE { iscsiSsnNodeIndex Unsigned32, iscsiSsnIndex Unsigned32, iscsiSsnDirection INTEGER, iscsiSsnInitiatorName IscsiName, iscsiSsnTargetName IscsiName, iscsiSsnTSIH Unsigned32, iscsiSsnISID OCTET STRING, iscsiSsnInitiatorAlias SnmpAdminString, iscsiSsnTargetAlias SnmpAdminString, iscsiSsnInitialR2T TruthValue, iscsiSsnImmediateData TruthValue, iscsiSsnType INTEGER, iscsiSsnMaxOutstandingR2T Unsigned32, iscsiSsnFirstBurstLength Unsigned32, iscsiSsnMaxBurstLength Unsigned32, iscsiSsnConnectionNumber Gauge32, iscsiSsnAuthIdentity RowPointer, iscsiSsnDataSequenceInOrder TruthValue, iscsiSsnDataPDUInOrder TruthValue, iscsiSsnErrorRecoveryLevel Unsigned32, iscsiSsnDiscontinuityTime TimeStamp }
iscsiSsnNodeIndex OBJECT-TYPE SYNTAX Unsigned32 (0..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An arbitrary integer used to uniquely identify a particular node within an iSCSI instance present on the local system. For normal, non-discovery sessions, this value will map to the iscsiNodeIndex. For discovery sessions that do not have a node associated, the value 0 (zero) is used." ::= { iscsiSessionAttributesEntry 1 }
iscsiSsnIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An arbitrary integer used to uniquely identify a particular session within an iSCSI instance present on the local system. An agent should attempt to not reuse index values unless a reboot has occurred. iSCSI sessions are destroyed during a reboot; rows in this table are not persistent across reboots." ::= { iscsiSessionAttributesEntry 2 }
iscsiSsnDirection OBJECT-TYPE SYNTAX INTEGER { inboundSession(1), outboundSession(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Direction of iSCSI session: inboundSession - session is established from an external initiator to a target within this iSCSI instance. outboundSession - session is established from an initiator within this iSCSI instance to an external target." ::= { iscsiSessionAttributesEntry 3 }
iscsiSsnInitiatorName OBJECT-TYPE SYNTAX IscsiName MAX-ACCESS read-only STATUS current DESCRIPTION "If iscsiSsnDirection is Inbound, this object is a UTF-8 string that will contain the name of the remote initiator. If this session is a discovery session that does not specify a particular initiator, this object will contain a zero-length string.
If iscsiSsnDirection is Outbound, this object will contain a zero-length string." ::= { iscsiSessionAttributesEntry 4 }
iscsiSsnTargetName OBJECT-TYPE SYNTAX IscsiName MAX-ACCESS read-only STATUS current DESCRIPTION "If iscsiSsnDirection is Outbound, this object is a UTF-8 string that will contain the name of the remote target. If this session is a discovery session that does not specify a particular target, this object will contain a zero-length string.
If iscsiSsnDirection is Inbound, this object will contain a zero-length string." ::= { iscsiSessionAttributesEntry 5 }
iscsiSsnTSIH OBJECT-TYPE SYNTAX Unsigned32 (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The target-defined identification handle for this session." REFERENCE "RFC 3720, Section 10.12.6, TSIH" ::= { iscsiSessionAttributesEntry 6 }
iscsiSsnISID OBJECT-TYPE SYNTAX OCTET STRING (SIZE(6)) MAX-ACCESS read-only STATUS current DESCRIPTION "The initiator-defined portion of the iSCSI Session ID." REFERENCE "RFC 3720, Section 10.12.5, ISID" ::= { iscsiSessionAttributesEntry 7 }
iscsiSsnInitiatorAlias OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "A UTF-8 string that gives the alias communicated by the initiator end of the session during the login phase.
If no alias exists, the value is a zero-length string." REFERENCE "RFC 3720, Section 12.7, InitiatorAlias" ::= { iscsiSessionAttributesEntry 8 }
iscsiSsnTargetAlias OBJECT-TYPE SYNTAX SnmpAdminString MAX-ACCESS read-only STATUS current DESCRIPTION "A UTF-8 string that gives the alias communicated by the target end of the session during the login phase.
If no alias exists, the value is a zero-length string." REFERENCE "RFC 3720, Section 12.6, TargetAlias" ::= { iscsiSessionAttributesEntry 9 }
iscsiSsnInitialR2T OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "If set to true, indicates that the initiator must wait for an R2T before sending to the target. If set to false, the initiator may send data immediately, within limits set by iscsiSsnFirstBurstLength and the expected data transfer length of the request." REFERENCE "RFC 3720, Section 12.10, InitialR2T" ::= { iscsiSessionAttributesEntry 10 }
iscsiSsnImmediateData OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Indicates whether the initiator and target have agreed to support immediate data on this session." REFERENCE "RFC 3720, Section 12.11, ImmediateData" ::= { iscsiSessionAttributesEntry 11 }
iscsiSsnType OBJECT-TYPE SYNTAX INTEGER { normalSession(1), discoverySession(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "Type of iSCSI session: normalSession - session is a normal iSCSI session discoverySession - session is being used only for discovery." REFERENCE "RFC 3720, Section 12.21, SessionType" ::= { iscsiSessionAttributesEntry 12 }
iscsiSsnMaxOutstandingR2T OBJECT-TYPE SYNTAX Unsigned32 (1..65535) UNITS "R2Ts" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum number of outstanding requests-to-transmit (R2Ts) per iSCSI task within this session." REFERENCE "RFC 3720, Section 12.17, MaxOutstandingR2T" ::= { iscsiSessionAttributesEntry 13 }
iscsiSsnFirstBurstLength OBJECT-TYPE SYNTAX Unsigned32 (512..16777215) UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum length supported for unsolicited data sent within this session." REFERENCE "RFC 3720, Section 12.14, FirstBurstLength" ::= { iscsiSessionAttributesEntry 14 }
iscsiSsnMaxBurstLength OBJECT-TYPE SYNTAX Unsigned32 (512..16777215) UNITS "bytes" MAX-ACCESS read-only STATUS current DESCRIPTION "The maximum number of bytes that can be sent within a single sequence of Data-In or Data-Out PDUs." REFERENCE "RFC 3720, Section 12.13, MaxBurstLength" ::= { iscsiSessionAttributesEntry 15 } iscsiSsnConnectionNumber OBJECT-TYPE SYNTAX Gauge32 (1..65535) UNITS "connections" MAX-ACCESS read-only STATUS current DESCRIPTION "The number of transport protocol connections that currently belong to this session." ::= { iscsiSessionAttributesEntry 16 }
iscsiSsnAuthIdentity OBJECT-TYPE SYNTAX RowPointer MAX-ACCESS read-only STATUS current DESCRIPTION "This object contains a pointer to a row in the IPS-AUTH MIB module that identifies the authentication method being used on this session, as communicated during the login phase." REFERENCE "IPS-AUTH MIB, RFC 4545"
::= { iscsiSessionAttributesEntry 17 }
iscsiSsnDataSequenceInOrder OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "False indicates that iSCSI data PDU sequences may be transferred in any order. True indicates that data PDU sequences must be transferred using continuously increasing offsets, except during error recovery." REFERENCE "RFC 3720, Section 12.19, DataSequenceInOrder" ::= { iscsiSessionAttributesEntry 18 }
iscsiSsnDataPDUInOrder OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "False indicates that iSCSI data PDUs within sequences may be in any order. True indicates that data PDUs within sequences must be at continuously increasing addresses, with no gaps or overlay between PDUs.
Default is true."
REFERENCE "RFC 3720, Section 12.18, DataPDUInOrder" ::= { iscsiSessionAttributesEntry 19 }
iscsiSsnErrorRecoveryLevel OBJECT-TYPE SYNTAX Unsigned32 (0..255) MAX-ACCESS read-only STATUS current DESCRIPTION "The level of error recovery negotiated between the initiator and the target. Higher numbers represent more detailed recovery schemes." REFERENCE "RFC 3720, Section 12.20, ErrorRecoveryLevel" ::= { iscsiSessionAttributesEntry 20 }
iscsiSsnDiscontinuityTime OBJECT-TYPE SYNTAX TimeStamp MAX-ACCESS read-only STATUS current DESCRIPTION "The value of SysUpTime on the most recent occasion at which any one or more of this session's counters suffered a discontinuity. When a session is established, and this object is created, it is initialized to the current value of SysUpTime." ::= { iscsiSessionAttributesEntry 21 }
-- Session Stats Table
iscsiSessionStatsTable OBJECT-TYPE SYNTAX SEQUENCE OF IscsiSessionStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of general iSCSI traffic counters for each of the sessions present on the system." ::= { iscsiSession 2 }
iscsiSessionStatsEntry OBJECT-TYPE SYNTAX IscsiSessionStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (row) containing general iSCSI traffic counters for a particular session." AUGMENTS { iscsiSessionAttributesEntry }
::= { iscsiSessionStatsTable 1 }
IscsiSessionStatsEntry ::= SEQUENCE { iscsiSsnCmdPDUs Counter32, iscsiSsnRspPDUs Counter32, iscsiSsnTxDataOctets Counter64, iscsiSsnRxDataOctets Counter64, iscsiSsnLCTxDataOctets Counter32, iscsiSsnLCRxDataOctets Counter32 }
iscsiSsnCmdPDUs OBJECT-TYPE SYNTAX Counter32 UNITS "PDUs" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of Command PDUs transferred on this session. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 1 }
iscsiSsnRspPDUs OBJECT-TYPE SYNTAX Counter32 UNITS "PDUs" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of Response PDUs transferred on this session. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 2 }
iscsiSsnTxDataOctets OBJECT-TYPE SYNTAX Counter64 UNITS "octets" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of data octets that were transmitted by the local iSCSI node on this session. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 3 }
iscsiSsnRxDataOctets OBJECT-TYPE SYNTAX Counter64 UNITS "octets" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of data octets that were received by the local iSCSI node on this session. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 4 }
iscsiSsnLCTxDataOctets OBJECT-TYPE SYNTAX Counter32 UNITS "octets" MAX-ACCESS read-only STATUS current DESCRIPTION "A Low Capacity shadow object of iscsiSsnTxDataOctets for those systems that don't support Counter64. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 5 }
iscsiSsnLCRxDataOctets OBJECT-TYPE SYNTAX Counter32 UNITS "octets" MAX-ACCESS read-only STATUS current DESCRIPTION "A Low Capacity shadow object of iscsiSsnRxDataOctets for those systems that don't support Counter64. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." ::= { iscsiSessionStatsEntry 6 }
-- Session Connection Error Stats Table
iscsiSessionCxnErrorStatsTable OBJECT-TYPE SYNTAX SEQUENCE OF IscsiSessionCxnErrorStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of error counters for each of the sessions present on this system." ::= { iscsiSession 3 }
iscsiSessionCxnErrorStatsEntry OBJECT-TYPE SYNTAX IscsiSessionCxnErrorStatsEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (row) containing error counters for a particular session." AUGMENTS { iscsiSessionAttributesEntry } ::= { iscsiSessionCxnErrorStatsTable 1 }
IscsiSessionCxnErrorStatsEntry ::= SEQUENCE { iscsiSsnCxnDigestErrors Counter32, iscsiSsnCxnTimeoutErrors Counter32 }
iscsiSsnCxnDigestErrors OBJECT-TYPE SYNTAX Counter32 UNITS "PDUs" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of PDUs that were received on the session and contained header or data digest errors. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." REFERENCE "RFC 3720, Section 6.7, Digest Errors" ::= { iscsiSessionCxnErrorStatsEntry 1 }
iscsiSsnCxnTimeoutErrors OBJECT-TYPE SYNTAX Counter32 UNITS "connections" MAX-ACCESS read-only STATUS current DESCRIPTION "The count of connections within this session that have been terminated due to timeout. If this counter has suffered a discontinuity, the time of the last discontinuity is indicated in iscsiSsnDiscontinuityTime." REFERENCE "RFC 3720, Section 6.4, Connection Timeout Management" ::= { iscsiSessionCxnErrorStatsEntry 2 }
iscsiConnection OBJECT IDENTIFIER ::= { iscsiObjects 11 }
-- Connection Attributes Table
iscsiConnectionAttributesTable OBJECT-TYPE SYNTAX SEQUENCE OF IscsiConnectionAttributesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A list of connections belonging to each iSCSI instance present on the system." ::= { iscsiConnection 1 }
iscsiConnectionAttributesEntry OBJECT-TYPE SYNTAX IscsiConnectionAttributesEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "An entry (row) containing management information applicable to a particular connection." INDEX { iscsiInstIndex, iscsiSsnNodeIndex, iscsiSsnIndex, iscsiCxnIndex } ::= { iscsiConnectionAttributesTable 1 }
IscsiConnectionAttributesEntry ::= SEQUENCE { iscsiCxnIndex Unsigned32, iscsiCxnCid Unsigned32, iscsiCxnState INTEGER, iscsiCxnAddrType InetAddressType, iscsiCxnLocalAddr InetAddress, iscsiCxnProtocol IscsiTransportProtocol, iscsiCxnLocalPort InetPortNumber, iscsiCxnRemoteAddr InetAddress, iscsiCxnRemotePort InetPortNumber, iscsiCxnMaxRecvDataSegLength Unsigned32, iscsiCxnMaxXmitDataSegLength Unsigned32, iscsiCxnHeaderIntegrity IscsiDigestMethod, iscsiCxnDataIntegrity IscsiDigestMethod, iscsiCxnRecvMarker TruthValue, iscsiCxnSendMarker TruthValue, iscsiCxnVersionActive Unsigned32 }
iscsiCxnIndex OBJECT-TYPE SYNTAX Unsigned32 (1..4294967295) MAX-ACCESS not-accessible STATUS current DESCRIPTION "An arbitrary integer used to uniquely identify a particular connection of a particular session within an iSCSI instance present on the local system. An agent should attempt to not reuse index values unless a reboot has occurred. iSCSI connections are destroyed during a reboot; rows in this table are not persistent across reboots."
::= { iscsiConnectionAttributesEntry 1 }
iscsiCxnCid OBJECT-TYPE SYNTAX Unsigned32 (1..65535) MAX-ACCESS read-only STATUS current DESCRIPTION "The iSCSI Connection ID for this connection." ::= { iscsiConnectionAttributesEntry 2 }
iscsiCxnState OBJECT-TYPE SYNTAX INTEGER { login(1), full(2), logout(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The current state of this connection, from an iSCSI negotiation point of view. Here are the states:
login - The transport protocol connection has been established, but a valid iSCSI login response with the final bit set has not been sent or received. full - A valid iSCSI login response with the final bit set has been sent or received. logout - A valid iSCSI logout command has been sent or received, but the transport protocol connection has not yet been closed." ::= { iscsiConnectionAttributesEntry 3 }
iscsiCxnAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-only STATUS current DESCRIPTION "The type of Internet Network Addresses contained in the corresponding instances of iscsiCxnLocalAddr and iscsiCxnRemoteAddr. The value 'dns' is not allowed." ::= { iscsiConnectionAttributesEntry 4 }
iscsiCxnLocalAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-only STATUS current DESCRIPTION
"The local Internet Network Address, of the type specified by iscsiCxnAddrType, used by this connection." ::= { iscsiConnectionAttributesEntry 5 }
iscsiCxnProtocol OBJECT-TYPE SYNTAX IscsiTransportProtocol MAX-ACCESS read-only STATUS current DESCRIPTION "The transport protocol over which this connection is running." ::= { iscsiConnectionAttributesEntry 6 }
iscsiCxnLocalPort OBJECT-TYPE SYNTAX InetPortNumber MAX-ACCESS read-only STATUS current DESCRIPTION "The local transport protocol port used by this connection. This object cannot have the value zero, since it represents an established connection." ::= { iscsiConnectionAttributesEntry 7 }
okay bestie, the remote side of the connection is next 🦋
iscsiCxnRemoteAddr OBJECT-TYPE
SYNTAX InetAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote Internet Network Address, of the type specified
by iscsiCxnAddrType, used by this connection."
::= { iscsiConnectionAttributesEntry 8 }
iscsiCxnRemotePort OBJECT-TYPE
SYNTAX InetPortNumber
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The remote transport protocol port used by this connection.
This object cannot have the value zero, since it represents
an established connection."
::= { iscsiConnectionAttributesEntry 9 }
iscsiCxnMaxRecvDataSegLength OBJECT-TYPE
SYNTAX Unsigned32 (512..16777215)
UNITS "bytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum data payload size supported for command
or data PDUs able to be received on this connection."
REFERENCE
"RFC 3720, Section 12.12, MaxRecvDataSegmentLength"
::= { iscsiConnectionAttributesEntry 10 }
iscsiCxnMaxXmitDataSegLength OBJECT-TYPE
SYNTAX Unsigned32 (512..16777215)
UNITS "bytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum data payload size supported for command
or data PDUs to be sent on this connection."
REFERENCE
"RFC 3720, Section 12.12, MaxRecvDataSegmentLength"
::= { iscsiConnectionAttributesEntry 11 }
iscsiCxnHeaderIntegrity OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object identifies the iSCSI header
digest scheme in use within this connection."
::= { iscsiConnectionAttributesEntry 12 }
iscsiCxnDataIntegrity OBJECT-TYPE
SYNTAX IscsiDigestMethod
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object identifies the iSCSI data
digest scheme in use within this connection."
::= { iscsiConnectionAttributesEntry 13 }
iscsiCxnRecvMarker OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates whether or not this connection
is receiving markers in its incoming data stream."
REFERENCE
"RFC 3720, Appendix A."
::= { iscsiConnectionAttributesEntry 14 }
iscsiCxnSendMarker OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object indicates whether or not this connection
is inserting markers in its outgoing data stream."
REFERENCE
"RFC 3720, Appendix A."
::= { iscsiConnectionAttributesEntry 15 }
iscsiCxnVersionActive OBJECT-TYPE
SYNTAX Unsigned32 (0..255)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Active version number of the iSCSI specification negotiated
on this connection."
REFERENCE
"RFC 3720, Section 10.12, Login Request"
::= { iscsiConnectionAttributesEntry 16 }
--**********************************************************************
-- Notifications
ooh, now the alarms. these are the notifications that ping the admin when things go sideways 🚨
iscsiTgtLoginFailure NOTIFICATION-TYPE
OBJECTS {
iscsiTgtLoginFailures,
iscsiTgtLastFailureType,
iscsiTgtLastIntrFailureName,
iscsiTgtLastIntrFailureAddrType,
iscsiTgtLastIntrFailureAddr
}
STATUS current
DESCRIPTION
"Sent when a login is failed by a target.
To avoid sending an excessive number of notifications due
to multiple errors counted, an SNMP agent implementing this
notification SHOULD NOT send more than 3 notifications of
this type in any 10-second time period."
::= { iscsiNotifications 1 }
iscsiIntrLoginFailure NOTIFICATION-TYPE
OBJECTS {
iscsiIntrLoginFailures,
iscsiIntrLastFailureType,
iscsiIntrLastTgtFailureName,
iscsiIntrLastTgtFailureAddrType,
iscsiIntrLastTgtFailureAddr
}
STATUS current
DESCRIPTION
"Sent when a login is failed by an initiator.
To avoid sending an excessive number of notifications due
to multiple errors counted, an SNMP agent implementing this
notification SHOULD NOT send more than 3 notifications of
this type in any 10-second time period."
::= { iscsiNotifications 2 }
iscsiInstSessionFailure NOTIFICATION-TYPE
OBJECTS {
iscsiInstSsnFailures,
iscsiInstLastSsnFailureType,
iscsiInstLastSsnRmtNodeName
}
STATUS current
DESCRIPTION
"Sent when an active session is failed by either the initiator
or the target.
To avoid sending an excessive number of notifications due
to multiple errors counted, an SNMP agent implementing this
notification SHOULD NOT send more than 3 notifications of
this type in any 10-second time period."
::= { iscsiNotifications 3 }
--**********************************************************************
-- Conformance Statements
iscsiCompliances OBJECT IDENTIFIER ::= { iscsiConformance 1 }
iscsiGroups OBJECT IDENTIFIER ::= { iscsiConformance 2 }
iscsiInstanceAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiInstDescr,
iscsiInstVersionMin,
iscsiInstVersionMax,
iscsiInstVendorID,
iscsiInstVendorVersion,
iscsiInstPortalNumber,
iscsiInstNodeNumber,
iscsiInstSessionNumber,
iscsiInstSsnFailures,
iscsiInstLastSsnFailureType,
iscsiInstLastSsnRmtNodeName,
iscsiInstDiscontinuityTime
}
STATUS current
DESCRIPTION
"A collection of objects providing information about iSCSI
instances."
::= { iscsiGroups 1 }
iscsiInstanceSsnErrorStatsGroup OBJECT-GROUP
OBJECTS {
iscsiInstSsnDigestErrors,
iscsiInstSsnCxnTimeoutErrors,
iscsiInstSsnFormatErrors
}
STATUS current
DESCRIPTION
"A collection of objects providing information about
errors that have caused a session failure for an
iSCSI instance."
::= { iscsiGroups 2 }
iscsiPortalAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiPortalRowStatus,
iscsiPortalStorageType,
iscsiPortalRoles,
iscsiPortalAddrType,
iscsiPortalAddr,
iscsiPortalProtocol,
iscsiPortalMaxRecvDataSegLength,
iscsiPortalPrimaryHdrDigest,
iscsiPortalPrimaryDataDigest,
iscsiPortalSecondaryHdrDigest,
iscsiPortalSecondaryDataDigest,
iscsiPortalRecvMarker
}
STATUS current
DESCRIPTION
"A collection of objects providing information about
the transport protocol endpoints of the local targets."
::= { iscsiGroups 3 }
iscsiTgtPortalAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiTgtPortalPort,
iscsiTgtPortalTag
}
STATUS current
DESCRIPTION
"A collection of objects providing information about
the transport protocol endpoints of the local targets."
::= { iscsiGroups 4 }
iscsiIntrPortalAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiIntrPortalTag
}
STATUS current
DESCRIPTION
"An object providing information about
the portal tags used by the local initiators."
::= { iscsiGroups 5 }
iscsiNodeAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiNodeName,
iscsiNodeAlias,
iscsiNodeRoles,
iscsiNodeTransportType,
iscsiNodeInitialR2T,
iscsiNodeImmediateData,
iscsiNodeMaxOutstandingR2T,
iscsiNodeFirstBurstLength,
iscsiNodeMaxBurstLength,
iscsiNodeMaxConnections,
iscsiNodeDataSequenceInOrder,
iscsiNodeDataPDUInOrder,
iscsiNodeDefaultTime2Wait,
iscsiNodeDefaultTime2Retain,
iscsiNodeErrorRecoveryLevel,
iscsiNodeDiscontinuityTime,
iscsiNodeStorageType
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
local targets."
::= { iscsiGroups 6 }
iscsiTargetAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiTgtLoginFailures,
iscsiTgtLastFailureTime,
iscsiTgtLastFailureType,
iscsiTgtLastIntrFailureName,
iscsiTgtLastIntrFailureAddrType,
iscsiTgtLastIntrFailureAddr
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
local targets."
::= { iscsiGroups 7 }
iscsiTargetLoginStatsGroup OBJECT-GROUP
OBJECTS {
iscsiTgtLoginAccepts,
iscsiTgtLoginOtherFails,
iscsiTgtLoginRedirects,
iscsiTgtLoginAuthorizeFails,
iscsiTgtLoginAuthenticateFails,
iscsiTgtLoginNegotiateFails
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
login attempts by remote initiators to local targets."
::= { iscsiGroups 8 }
iscsiTargetLogoutStatsGroup OBJECT-GROUP
OBJECTS {
iscsiTgtLogoutNormals,
iscsiTgtLogoutOthers
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
logout events between remote initiators and local targets."
::= { iscsiGroups 9 }
iscsiTargetAuthGroup OBJECT-GROUP
OBJECTS {
iscsiTgtAuthRowStatus,
iscsiTgtAuthStorageType,
iscsiTgtAuthIdentity
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
remote initiators that are authorized to connect to local
targets."
::= { iscsiGroups 10 }
iscsiInitiatorAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiIntrLoginFailures,
iscsiIntrLastFailureTime,
iscsiIntrLastFailureType,
iscsiIntrLastTgtFailureName,
iscsiIntrLastTgtFailureAddrType,
iscsiIntrLastTgtFailureAddr
}
STATUS current
DESCRIPTION
"A collection of objects providing information about
all local initiators."
::= { iscsiGroups 11 }
iscsiInitiatorLoginStatsGroup OBJECT-GROUP
OBJECTS {
iscsiIntrLoginAcceptRsps,
iscsiIntrLoginOtherFailRsps,
iscsiIntrLoginRedirectRsps,
iscsiIntrLoginAuthFailRsps,
iscsiIntrLoginAuthenticateFails,
iscsiIntrLoginNegotiateFails
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
login attempts by local initiators to remote targets."
::= { iscsiGroups 12 }
iscsiInitiatorLogoutStatsGroup OBJECT-GROUP
OBJECTS {
iscsiIntrLogoutNormals,
iscsiIntrLogoutOthers
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
logout events between local initiators and remote targets."
::= { iscsiGroups 13 }
iscsiInitiatorAuthGroup OBJECT-GROUP
OBJECTS {
iscsiIntrAuthRowStatus,
iscsiIntrAuthStorageType,
iscsiIntrAuthIdentity
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
remote targets that are initiators of the local system
that they are authorized to access."
::= { iscsiGroups 14 }
iscsiSessionAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiSsnDirection,
iscsiSsnInitiatorName,
iscsiSsnTargetName,
iscsiSsnTSIH,
iscsiSsnISID,
iscsiSsnInitiatorAlias,
iscsiSsnTargetAlias,
iscsiSsnInitialR2T,
iscsiSsnImmediateData,
iscsiSsnType,
iscsiSsnMaxOutstandingR2T,
iscsiSsnFirstBurstLength,
iscsiSsnMaxBurstLength,
iscsiSsnConnectionNumber,
iscsiSsnAuthIdentity,
iscsiSsnDataSequenceInOrder,
iscsiSsnDataPDUInOrder,
iscsiSsnErrorRecoveryLevel,
iscsiSsnDiscontinuityTime
}
STATUS current
DESCRIPTION
"A collection of objects providing information applicable to
all sessions."::= { iscsiGroups 15 }
iscsiSessionPDUStatsGroup OBJECT-GROUP
OBJECTS {
iscsiSsnCmdPDUs,
iscsiSsnRspPDUs
}
STATUS current
DESCRIPTION
"A collection of objects providing information about PDU
traffic for each session."
::= { iscsiGroups 16 }
iscsiSessionOctetStatsGroup OBJECT-GROUP
OBJECTS {
iscsiSsnTxDataOctets,
iscsiSsnRxDataOctets
}
STATUS current
DESCRIPTION
"A collection of objects providing information about octet
traffic for each session using a Counter64 data type."
::= { iscsiGroups 17 }
iscsiSessionLCOctetStatsGroup OBJECT-GROUP
OBJECTS {
iscsiSsnLCTxDataOctets,
iscsiSsnLCRxDataOctets
}
STATUS current
DESCRIPTION
"A collection of objects providing information about octet
traffic for each session using a Counter32 data type."
::= { iscsiGroups 18 }
iscsiSessionCxnErrorStatsGroup OBJECT-GROUP
OBJECTS {
iscsiSsnCxnDigestErrors,
iscsiSsnCxnTimeoutErrors
}
STATUS current
DESCRIPTION
"A collection of objects providing information about connection
errors for all sessions."
::= { iscsiGroups 19 }
iscsiConnectionAttributesGroup OBJECT-GROUP
OBJECTS {
iscsiCxnCid,
iscsiCxnState,
iscsiCxnProtocol,
iscsiCxnAddrType,
iscsiCxnLocalAddr,
iscsiCxnLocalPort,
iscsiCxnRemoteAddr,
iscsiCxnRemotePort,
iscsiCxnMaxRecvDataSegLength,
iscsiCxnMaxXmitDataSegLength,
iscsiCxnHeaderIntegrity,
iscsiCxnDataIntegrity,
iscsiCxnRecvMarker,
iscsiCxnSendMarker,
iscsiCxnVersionActive
}
STATUS current
DESCRIPTION
"A collection of objects providing information about all
connections used by all sessions."
::= { iscsiGroups 20 }
iscsiTgtLgnNotificationsGroup NOTIFICATION-GROUP
NOTIFICATIONS {
iscsiTgtLoginFailure
}
STATUS current
DESCRIPTION
"A collection of notifications that indicate a login
failure from a remote initiator to a local target."
::= { iscsiGroups 21 }
iscsiIntrLgnNotificationsGroup NOTIFICATION-GROUP
NOTIFICATIONS {
iscsiIntrLoginFailure
}
STATUS current
DESCRIPTION
"A collection of notifications that indicate a login
failure from a local initiator to a remote target."
::= { iscsiGroups 22 }
iscsiSsnFlrNotificationsGroup NOTIFICATION-GROUP
NOTIFICATIONS {
iscsiInstSessionFailure
}
STATUS current
DESCRIPTION
"A collection of notifications that indicate session
failures occurring after login."
::= { iscsiGroups 23 }
--**********************************************************************
iscsiComplianceV1 MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"Initial version of compliance statement based on
initial version of this MIB module.
If an implementation can be both a target and an
initiator, all groups are mandatory."
MODULE -- this module
MANDATORY-GROUPS {
iscsiInstanceAttributesGroup,
iscsiInstanceSsnErrorStatsGroup,
iscsiPortalAttributesGroup,
iscsiNodeAttributesGroup,
iscsiSessionAttributesGroup,
iscsiSessionPDUStatsGroup,
iscsiSessionCxnErrorStatsGroup,
iscsiConnectionAttributesGroup,
iscsiSsnFlrNotificationsGroup
}
-- Conditionally mandatory groups depending on the ability
-- to support Counter64 data types and/or to provide counter
-- information to SNMPv1 applications.
GROUP iscsiSessionOctetStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that can support Counter64 data types."
GROUP iscsiSessionLCOctetStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that provide information to SNMPv1-only applications;
this includes agents that cannot support Counter64
data types."
-- Conditionally mandatory groups to be included with
-- the mandatory groups when the implementation has
-- iSCSI target facilities.
GROUP iscsiTgtPortalAttributesGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
OBJECT iscsiPortalMaxRecvDataSegLength
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required."
OBJECT iscsiNodeStorageType
MIN-ACCESS read-only
DESCRIPTION
"Write access is not required; an implementation may
choose to allow this object to be set to 'volatile'
or 'nonVolatile'."
GROUP iscsiTargetAttributesGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
GROUP iscsiTargetLoginStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
GROUP iscsiTargetLogoutStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
GROUP iscsiTgtLgnNotificationsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
GROUP iscsiTargetAuthGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI target facilities."
-- Conditionally mandatory groups to be included with
-- the mandatory groups when the implementation has
-- iSCSI initiator facilities.
GROUP iscsiIntrPortalAttributesGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
GROUP iscsiInitiatorAttributesGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
GROUP iscsiInitiatorLoginStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
GROUP iscsiInitiatorLogoutStatsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
GROUP iscsiIntrLgnNotificationsGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
GROUP iscsiInitiatorAuthGroup
DESCRIPTION
"This group is mandatory for all iSCSI implementations
that have iSCSI initiator facilities."
OBJECT iscsiNodeErrorRecoveryLevel
SYNTAX Unsigned32 (0..2)
DESCRIPTION
"Only values 0-2 are defined at present."
::= { iscsiCompliances 1 }
END8. Security Considerations 🔐
Okay bestie, this part is serious, so let's get into it 💀. There are a bunch of management objects in this MIB module with a MAX-ACCESS clause of read-write and/or read-create. These objects can be considered sensitive or vulnerable in some network environments. Supporting SET operations in a non-secure environment without proper protection can have a negative effect on network operations. Here are the tables and objects, plus their sensitivity and vulnerability:
iscsiPortalAttributesTable,iscsiTgtPortalAttributesTable, andiscsiIntrPortalAttributesTablecan be used to add or remove IP addresses to be used by iSCSI.iscsiTgtAuthAttributesTableentries can be added or removed, to allow or disallow access to a target by an initiator.
Some of the readable objects in this MIB module (so, objects with a MAX-ACCESS other than not-accessible) can also be considered sensitive or vulnerable in some network environments. It's super important to control even GET and/or NOTIFY access to these objects, and possibly even encrypt their values when sending them over the network via SNMP 🫶. Here are those tables and objects:
iscsiNodeAttributesTable,iscsiTargetAttributesTable, andiscsiTgtAuthorizationcan be used to glean information needed to make connections to the iSCSI targets this module represents. However, it is the responsibility of the initiators and targets involved to authenticate each other, so that an inappropriately advertised or discovered initiator or target does not compromise their security. These issues are discussed in [RFC3720].
SNMP versions prior to SNMPv3 did not include adequate security. Even if the network itself is secure (for example, by using IPsec), there is still no control over who on the secure network is allowed to access and GET/SET (read/change/create/delete) the objects in this MIB module 🙈.
It is RECOMMENDED that implementors consider the security features provided by the SNMPv3 framework (see [RFC3410], section 8), including full support for the SNMPv3 cryptographic mechanisms (for authentication and privacy) ✨.
Further, deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to enable cryptographic security 🔥. It is then a customer/operator responsibility to ensure that the SNMP entity giving access to an instance of this MIB module is properly configured to give access to the objects only to those principals (users) that have legitimate rights to indeed GET or SET (change/create/delete) them 👑.
9. IANA Considerations 🎀
The IANA has assigned a MIB OID number under the mib-2 branch for the ISCSI-MIB 🌸.
10. Normative References 📚
- [RFC3720] Satran, J., Meth, K., Sapuntzakis, C., Chadalapaka, M., and E. Zeidner, "Internet Small Computer Systems Interface (iSCSI)", RFC 3720, March 2004.
- [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
- [RFC2578] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
- [RFC2579] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
- [RFC2580] McCloghrie, K., Perkins, D., Schoenwaelder, J., Case, J., Rose, M., and S. Waldbusser, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
- [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 4001, February 2005.
- [RFC3411] Harrington, D., Presuhn, R., and B. Wijnen, "An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks", STD 62, RFC 3411, December 2002.
- [RFC4545] Bakke, M. and J. Muchow, "Definitions of Managed Objects for IP Storage User Identity Authorization", RFC 4545, May 2006.
11. Informative References 🦋
- [RFC3410] Case, J., Mundy, R., Partain, D., and B. Stewart, "Introduction and Applicability Statements for Internet-Standard Management Framework", RFC 3410, December 2002.
- [RFC4022] Raghunarayan, R., "Management Information Base for the Transmission Control Protocol (TCP)", RFC 4022, March 2005.
- [RFC4455] Hallak-Stamler, M., Bakke, M., Lederman, Y., Krueger, M., and K. McCloghrie, "Definition of Managed Objects for Small Computer System Interface (SCSI) Entities", RFC 4455, April 2006.
12. Acknowledgements 💖
okay so, this MIB module did NOT come together by itself 🥹 a whole crew of people showed up to weekly conference calls to hash out the requirements, object models, table structures, and attributes. literally so much teamwork 🫶
big shoutout to John Hufferd, Tom McSweeney (IBM), Kevin Gibbons (Nishan Systems), Chad Gregory (Intel), Jack Harwood (EMC), Hari Mudaliar (Adaptec), Ie Wei Njoo (Agilent), Lawrence Lamers (SAN Valley), Satish Mali (Stonefly Networks), and William Terrell (Troika) ✨
Special thanks 🎀 to Tom McSweeney, Ie Wei Njoo, and Kevin Gibbons, who wrote the descriptions for a ton of the tables and attributes in here (the main character writing energy is OFF the charts 👑). Also to Ayman Ghanem, who found and suggested fixes for a bunch of problems in this module 🔍, and to Keith McCloghrie, who served as advisor to the team 🧚
Authors' Addresses 🦋
Mark Bakke Cisco Systems, Inc 7900 International Drive, Suite 400 Bloomington, MN USA 55425
EMail: mbakke@cisco.com
Marjorie Krueger Hewlett-Packard Networked Storage Architecture Networked Storage Solutions Org. 8000 Foothills Blvd. Roseville, CA USA 95747
EMail: marjorie_krueger@hp.com
Tom McSweeney IBM Corporation 600 Park Offices Drive Research Triangle Park, NC USA 27709
EMail: tommcs@us.ibm.com
James Muchow Qlogic Corp. 6321 Bury Drive Eden Prairie, MN USA 55346
EMail: james.muchow@qlogic.com
Full Copyright Statement 📜
Copyright (C) The Internet Society (2006) 🌸
This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights.
This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Intellectual Property 🔐
okay the IETF is being very careful here 😭 it takes no position on whether any Intellectual Property Rights (or other rights) that might be claimed to apply to the technology in this document are valid or in scope, or whether a license under those rights is available. it also doesn't claim to have independently checked for any such rights. if you want info on how rights work for RFC documents, it's in BCP 78 and BCP 79 📚
copies of IPR disclosures sent to the IETF Secretariat, plus any assurances of licenses that will be made available, or the result of an attempt to get a general license for implementers or users of this spec, can be found in the IETF on-line IPR repository at http://www.ietf.org/ipr 🌈
the IETF also invites anyone to point out any copyrights, patents or patent applications, or other proprietary rights that might cover technology needed to implement this standard. send that info to the IETF at ietf-ipr@ietf.org 💌
Acknowledgement 🧚♀️
Funding for the RFC Editor function is provided by the IETF Administrative Support Activity (IASA) 💜
📦 where this page comes from
- ietf: rfc4544 2006-05
- 💖 girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms